last executing test programs: 5.864178244s ago: executing program 1 (id=1436): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x4a, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, @perf_config_ext={0x0, 0x1946}, 0x0, 0x0, 0x0, 0x4, 0x3fe, 0x7fffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) bpf$BPF_PROG_TEST_RUN(0x1c, 0x0, 0x0) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x4, @perf_config_ext={0x8, 0x830d}, 0x0, 0x2, 0xfffffffe}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x4, 0xc, &(0x7f0000000000)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = socket$kcm(0xf, 0x3, 0x2) sendmsg$inet(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000000)="020b070002000000e4a17c45c8d260c9", 0x10}], 0x1}, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000080)={'pimreg0\x00', 0x7c2}) bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x6, 0x5, 0x0, &(0x7f0000000240)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x4}, 0x94) perf_event_open(&(0x7f0000000680)={0x2, 0x80, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x4}, 0x0, 0x1, 0x0, 0x0, 0x0, 0x80000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000b00)=ANY=[@ANYBLOB="0b00000008000000010001000900000001000000", @ANYRES32, @ANYBLOB="00000000000000000000000000000000000000002d086ef585b82606ee127c78ff06ae71604601893381d52550ed78bcf5fde82132ef3d01310ef5adb3c7360993fcdd20380de3562684bd4392295ef66d111f4379979f5fa884e26f8bc6a4ea33353a737bf6bd8dddd3af45c042c514eaad50033f2ce8072686d6f83d76ca664a95ca5dc84442c4fa502b", @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000ae00000018110000", @ANYRES32=r2, @ANYBLOB], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000680)={r3}, 0xc) recvmsg$kcm(0xffffffffffffffff, &(0x7f0000000800)={0x0, 0x0, 0x0}, 0x18000) socket$kcm(0x10, 0x2, 0x4) close(0xffffffffffffffff) socketpair(0x22, 0x6, 0x24, &(0x7f0000000ac0)) 5.496030768s ago: executing program 0 (id=1438): r0 = perf_event_open(0x0, 0x0, 0x1, 0xffffffffffffffff, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x26e1, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r2, &(0x7f0000000500)={0x0, 0x4000000, &(0x7f0000001740)=[{&(0x7f0000000280)='>', 0x20000281}], 0x1}, 0x0) perf_event_open(&(0x7f0000000000)={0x8, 0x80, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000080)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000000)={0x8, 0x80, 0x0, 0x0, 0x0, 0x6, 0x0, 0x2004, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000080)}, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000001c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r3) recvmsg(r1, &(0x7f0000000480)={&(0x7f0000000100)=@l2tp={0x2, 0x0, @empty}, 0x80, &(0x7f0000000340)=[{&(0x7f00000002c0)=""/58, 0x3a}, {&(0x7f0000000300)=""/38, 0x26}], 0x2, &(0x7f0000000380)=""/204, 0xcc}, 0x2020) socketpair$unix(0x1, 0x1, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) socketpair(0x1, 0x1, 0x0, &(0x7f0000000180)) ioctl$TUNSETFILTEREBPF(r1, 0x800454e1, &(0x7f0000000980)=r3) bpf$BPF_GET_PROG_INFO(0xf, 0x0, 0x0) 5.236775909s ago: executing program 1 (id=1442): bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x10, 0x4, &(0x7f0000000000)=@framed={{}, [@call={0x85, 0x0, 0x0, 0x8c}]}, &(0x7f0000000100)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x16, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 5.155978483s ago: executing program 1 (id=1443): r0 = socket$kcm(0x10, 0x2, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_MSG_GETOBJ_RESET(r1, &(0x7f0000000280)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000040)={&(0x7f0000000200)={0x78, 0x15, 0xa, 0x101, 0x0, 0x0, {0x2}, [@NFTA_OBJ_USERDATA={0x64, 0x8, "495813ec01db7c80d2f6f00a24c922c4afcaf83bfaaefcecab205a0a25bcabf01def1f11e3e426e951b4a2923225811dfb0517492adf9c43d5c77d3b660710a50ccc34d808066d23427bf5bff47032b1b0a77d3436a492de3eff14944895c1ed"}]}, 0x78}}, 0x48c1) sendmsg$kcm(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)="d8000000180081054e81f782db4cb90402200800fe00fe05e8fe55a10a0015000600142603600e1208000f007f370401a8001600200001401c00010003580461c1d67f6f94007134cf6efb8000a007a290457f0189b316277ce06bbace8017cbec4c2ee5a7cef4090014d6d930dfe1d9d322fe7c9f8775730d16a4683f5aeb4edbb57a5025ccca9e00350db798262f3d40fad95667e006dcdf63951f215c3b8b6ad2cba0e2375ee535e3bb9ad809d5e1cace81ed0bffece0b42a9ecbee5de6ccd40dd6f4edef3d93452a92954b43370e9703920723f9a941", 0xd8}], 0x1}, 0x0) 5.147883331s ago: executing program 0 (id=1444): bpf$TOKEN_CREATE(0x24, 0x0, 0x0) perf_event_open(&(0x7f0000000040)={0x4, 0x80, 0xeb, 0x0, 0x0, 0x10, 0x0, 0x0, 0x2101, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x7, 0xffffffffffffffff}, 0x828, 0x0, 0x0, 0x0, 0x9, 0x800000, 0xffff, 0x0, 0x0, 0x0, 0x40}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xc) bpf$MAP_CREATE(0x0, 0x0, 0x64) bpf$PROG_LOAD(0x5, 0x0, 0x0) socket$kcm(0x10, 0x2, 0x0) bpf$MAP_CREATE_RINGBUF(0x0, 0x0, 0x0) r0 = socket$kcm(0x2a, 0x2, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(r0, 0x541b, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='cgroup.events\x00', 0x275a, 0x0) socket$kcm(0xa, 0x5, 0x0) write$cgroup_int(r1, 0x0, 0x0) r2 = perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x4a, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x1943}, 0x5000, 0x0, 0x0, 0x8, 0x3fe, 0x7fffffff, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) recvmsg$unix(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, 0x0}, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000f80)={0x5, 0x5, 0x0, &(0x7f0000000000)='syzkaller\x00', 0x1, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @fallback=0x13, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = socket$kcm(0xa, 0x5, 0x0) setsockopt$sock_attach_bpf(r4, 0x0, 0x29, 0x0, 0x20000) ioctl$PERF_EVENT_IOC_SET_BPF(r2, 0x40042408, r3) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x8, 0x830d}, 0x0, 0x2, 0xfffffffe, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r5, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000003c0)=@newtaction={0xd8, 0x30, 0xffff, 0xfffffffe, 0x0, {}, [{0xc4, 0x1, [@m_police={0x6c, 0x1, 0x0, 0x0, {{0xb}, {0x40, 0x2, 0x0, 0x1, [[@TCA_POLICE_TBF={0x3c, 0x1, {0x0, 0x0, 0x0, 0x0, 0x4, {0xfc}, {0x0, 0x0, 0x0, 0x6}}}]]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc}}}, @m_gact={0x54, 0x2, 0x0, 0x0, {{0x9}, {0x28, 0x2, 0x0, 0x1, [@TCA_GACT_PARMS={0x18, 0x2, {0x1}}, @TCA_GACT_PROB={0xc, 0x3, {0x2, 0x1419, 0x4}}]}, {0x4}, {0xc, 0x7, {0x1, 0x1}}, {0xc}}}]}]}, 0xd8}, 0x1, 0x0, 0x0, 0x20004000}, 0x0) 5.074269274s ago: executing program 1 (id=1445): socket$nl_netfilter(0x10, 0x3, 0xc) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x8, 0x830d}, 0x0, 0x2, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000000000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x4a, 0x1, 0x0, 0x0, 0x0, 0x0, 0x2040, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x1946}, 0x2, 0x0, 0x0, 0x8, 0x3fe, 0x7fffffff, 0x0, 0x0, 0x0, 0x0, 0x8000000000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r0) bpf$PROG_LOAD(0x5, 0x0, 0x0) sendmsg$NFQNL_MSG_CONFIG(0xffffffffffffffff, 0x0, 0x24000050) socket$nl_rdma(0x10, 0x3, 0x14) socketpair$unix(0x1, 0x5, 0x0, 0x0) close(0xffffffffffffffff) perf_event_open(&(0x7f0000000380)={0x0, 0x80, 0x0, 0x7, 0x0, 0x4, 0x0, 0x0, 0x2, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={0x0, 0x1}, 0x8052b, 0xca, 0x1, 0x0, 0x0, 0x400000, 0x0, 0x0, 0xe, 0x0, 0x8}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0}, 0x90) write$cgroup_subtree(0xffffffffffffffff, 0x0, 0xcfa4) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) sendmsg$NFT_BATCH(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000500)=ANY=[@ANYBLOB="140000001000010000000000000000000300000a50000000060a010400000000000000000a0000040900010073797a31000000000900020073797a320000000024000480200001800d00010073796e70726f7879000000000c00028006000140b4b40000140000"], 0x78}, 0x1, 0x0, 0x0, 0x4000850}, 0x24044010) bpf$PROG_LOAD(0x5, &(0x7f0000000400)={0x16, 0x13, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018010000786c252500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000000000008500000006000000180100002020702500000000002020207b1ad8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000080000000"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x33, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x4a, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x2, 0x1946}, 0x0, 0x0, 0x0, 0x8, 0x7fe, 0x7fffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000740)={0x0, 0x5, &(0x7f0000000000)=ANY=[@ANYRES64, @ANYRES32, @ANYBLOB='\x00\x00\x00\x00\x00'], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x1000}, 0x94) r3 = socket$kcm(0xa, 0x2, 0x73) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x8, 0x830d}, 0x0, 0x2, 0xfffffffe}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg$inet(r3, &(0x7f0000001180)={&(0x7f0000000000)={0xa, 0x0, @empty}, 0xffac, &(0x7f0000001080)=[{&(0x7f0000000040)="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", 0xffa0}, {&(0x7f0000001040)="9d7fcf3efc63f4a6a555ba8b4726d7ccaf8a207100e69cfac4377876021d7131b838059f96bd206d4776368ed2a92432e5af71", 0x33}], 0x2, &(0x7f00000010c0)=[@ip_tos_int={{0x18, 0x29, 0x36}}, @ip_tos_u8={{0x38, 0x29, 0x3b}}, @ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @empty, @loopback}}}], 0x50}, 0x0) 4.817641509s ago: executing program 0 (id=1449): socket$kcm(0x2, 0x922000000001, 0x106) perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x4a, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x1946}, 0x0, 0x0, 0x0, 0x8, 0x3fe, 0x7fffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000780)={0x5, 0x3, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000012000000000000"], &(0x7f0000000c00)='GPL\x00'}, 0x94) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000002c0)={r0, 0x4, 0x29, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) bpf$PROG_LOAD(0x5, 0x0, 0x0) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x8, 0x830d}, 0x0, 0x2, 0xfffffffe, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000000000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$kcm(0x10, 0x2, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x3a, 0x1, 0x0, 0x0, 0x0, 0x7fef, 0x82, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7b, 0x1, @perf_config_ext={0x407fff, 0xaea}, 0x14105, 0x2e, 0xfffffbff, 0x3, 0x2, 0xfffffffc, 0x6, 0x0, 0x0, 0x0, 0xa9e6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9) ioctl$TUNSETIFF(r1, 0x400454ca, 0x0) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xec, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2101, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x7, 0xffffffffffffffff}, 0x828, 0x0, 0x0, 0x0, 0x9, 0xd2d, 0x0, 0x0, 0x0, 0x0, 0x40}, 0x0, 0x3, 0xffffffffffffffff, 0x0) socket$kcm(0x10, 0x2, 0x10) socket$kcm(0x2c, 0x3, 0x0) socket$kcm(0x2c, 0x3, 0x0) r2 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000001840)=[{&(0x7f0000000580)="6700000011008188040f56ecdb4cb9cca7480ef434000000e3bd6efb440009000e000a0010000000ba80010000005a8c3774fa0af3dc59a933c1e7a6d3361d83b20000319cdf5656826edaaa11032701c61ec666d482078ccebcb9a4f187f7a4e98f09cd", 0x64}], 0x1}, 0x0) 3.606916575s ago: executing program 0 (id=1453): openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x80200, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='blkio.throttle.io_serviced_recursive\x00', 0x26e1, 0x0) r1 = socket$kcm(0x2, 0x2, 0x0) setsockopt$sock_attach_bpf(r1, 0x1, 0x2e, &(0x7f0000000640)=r0, 0x4) recvmsg$kcm(r1, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000000}, 0x0) perf_event_open(&(0x7f00000007c0)={0x2, 0x80, 0x62, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext={0x6, 0x104800}, 0x0, 0x0, 0x0, 0x6, 0x0, 0x2, 0x1}, 0x0, 0xffffffbfffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000780)={0x5, 0x3, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000012000000000000000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffffd}, 0x94) ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x89e2, &(0x7f0000000100)={0xffffffffffffffff}) sendmsg$IPSET_CMD_TEST(r2, &(0x7f0000000380)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000340)={&(0x7f0000001180)={0x5c, 0xb, 0x6, 0x401, 0x0, 0x0, {}, [@IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_CADT_FLAGS={0x8, 0x8, 0x1, 0x0, 0x44}]}, @IPSET_ATTR_LINENO={0x8, 0x9, 0x1, 0x0, 0x6}, @IPSET_ATTR_ADT={0x2c, 0x8, 0x0, 0x1, [{0xc, 0x7, 0x0, 0x1, @IPSET_ATTR_CIDR={0x5, 0x3, 0xd}}, {0x10, 0x7, 0x0, 0x1, @IPSET_ATTR_BYTES={0xc, 0x18, 0x1, 0x0, 0xfffffffffffffff8}}, {0xc, 0x7, 0x0, 0x1, @IPSET_ATTR_SKBPRIO={0x8, 0x1c, 0x1, 0x0, 0x3a06}}]}, @IPSET_ATTR_LINENO={0x8, 0x9, 0x1, 0x0, 0xfffffff9}]}, 0x5c}, 0x1, 0x0, 0x0, 0x4000000}, 0x810) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x5, 0x3, &(0x7f0000000440)=ANY=[], &(0x7f00000000c0)='syzkaller\x00'}, 0x94) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000002c0)={r3, 0x4, 0x29, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) r4 = socket$kcm(0x10, 0x3, 0x10) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000340)=@base={0x1, 0x100004, 0x5, 0x4, 0x1, 0x1}, 0x48) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB], 0x48) r6 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000006c0)={0x18, 0xb, &(0x7f0000000640)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020000000000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f00000004c0)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000300)='rcu_utilization\x00', r6}, 0x10) socketpair$unix(0x1, 0x1, 0x0, 0x0) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080), &(0x7f00000003c0), 0x20000402, r5}, 0x38) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000000040)={r5, 0x0, &(0x7f0000000240)=""/99}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000000780)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0xfffffffffffffd00}, 0x48) sendmsg$kcm(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000040)="1400000016000b63d25a80648c2594f90f24fc60", 0x8c0}], 0x1}, 0x0) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r7, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a03000000000000000000070000040900010073797a30000000009c000000090a010400000000000000000700000308000a40000000000900020073797a30000000000900010073797a3000000000080005400000000d58001280200001800e000100636f6e6e6c696d69740000000c0002800800014000000008200001800e000100636f6e6e6c696d69740000000c000280080001400000000014070080090001006c617374000000000400028008000340000001"], 0xe4}}, 0x20050800) sendmsg$inet(r2, &(0x7f0000000740)={&(0x7f00000004c0)={0x2, 0x4e21, @multicast1}, 0x10, &(0x7f0000000700)=[{&(0x7f0000000500)="17e7e534ed677084d26fe2652f59620fde97cd8345261df4caaf5e16a68666a4e3d02f4cf00b21cc6ea5f00c", 0x2c}, {&(0x7f0000000580)="3d38100132fd743afa2d4e0d086949640bf2db9826b3550a8063a8014dbbf4655b82ac5771903175a19ae21daefb3388dd0e2010866a12453462dee71cb0fa6ca0b9c7996f0962277a3136e0604fdf400e1bc620e01fadbdbb5aa0d500ce7ced6af8f85c3f9e33281431610b0cdbd93beca5ff506ce426dbb3ac8708c26c67e33b95127bb50d2f2a8aac2f66da125196234f3ffa1e32", 0x96}, {&(0x7f0000000640)="5b40ea220680001bc075349f07a6d28d07d4c115", 0x14}, {&(0x7f0000000680)="0ad8181c5a0057740df7da63366bd69f3ebd8557d7515f0a4ffeea9a30370a590ca3b39530927d48e844d6fa1fc9c554abdf808e82370a344f869eee632358fac35c8f08a4f73dd80b1a0dfddad96eb7149e3f4576b6c0e331c9e182f99c87a175f8fc4f081119305f6967ab057d95d03a38d3", 0x73}], 0x4, &(0x7f0000001180)}, 0x4040080) 3.522052639s ago: executing program 4 (id=1454): socket$kcm(0x2, 0x922000000001, 0x106) perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x4a, 0x1, 0x0, 0x0, 0x0, 0x4, 0x0, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x8000001946}, 0x0, 0x0, 0x0, 0x8, 0x3fe, 0x7fffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000780)={0x5, 0x3, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000001200000000000000000095"], &(0x7f0000000c00)='GPL\x00'}, 0x94) r1 = socket$netlink(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r1, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1}, 0x8844) r2 = bpf$MAP_CREATE_RINGBUF(0x0, 0x0, 0x0) bpf$BPF_MAP_LOOKUP_AND_DELETE_ELEM(0x15, &(0x7f0000000240)={r2, &(0x7f00000005c0)="7450b184926831bc2a0fd706c07d4444d45138e406bc14b952e9eb7b86175cd8236e13776b65f3566a40e383366373bc5296d770b3acfe8ae4ad32820cd89679ffb8359d99fc9405df56944e88be2ef6b629cb8df7149c10fa26357c30ab6f24895c8f8d09c30cef9aa2f023933ab15507707c3069346d5e316cbe5ece7b88a584a79015aba4072c6f200bf13c68a46e437f2c505b39608ff619b95b7ba6a21223fef1986a8c9b1afe982231eaa3a1ecdd9cc427a205482cd5f02cab979f216695a8dd972c4986aac95254ebbb942418609e1d14627c3046490e49d9939ab07a8ff6efed7808", &(0x7f00000006c0)=""/171}, 0x20) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000002c0)={r0, 0x4, 0x29, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) r3 = perf_event_open(&(0x7f0000000100)={0x2, 0x80, 0x52, 0x1, 0x0, 0x0, 0x0, 0x7fef, 0x82, 0xd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7d, 0x1, @perf_config_ext={0x407fff, 0xaea}, 0x14105, 0x2e, 0xfffffbff, 0x3, 0x2, 0x0, 0x6, 0x0, 0x0, 0x0, 0xa9e6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9) ioctl$PERF_EVENT_IOC_SET_FILTER(r3, 0x40082406, 0x0) r4 = perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.net/syz0\x00', 0x1ff) write$cgroup_devices(0xffffffffffffffff, &(0x7f0000000980)=ANY=[@ANYBLOB='b 5:', @ANYRESOCT], 0x14) ioctl$PERF_EVENT_IOC_MODIFY_ATTRIBUTES(r4, 0x4008240b, 0x0) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x8, 0x830d}, 0x0, 0x2, 0xfffffffe}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000d40)=ANY=[@ANYBLOB="140000001000010000002000000000000000000a20000000000a03000000000000000000070000000900010073797a30000000004c000000090a010400000000000000000700000008000a40000000000900020073797a31000000000900010073797a30000000000800054000000021100011800c000100636f756e74657200400100000c0a01010000000000000000070000000900020073797a31000000000900010073797a30000000001401038010010080080003400000000203"], 0x1d4}, 0x1, 0x0, 0x0, 0x8000}, 0x0) 3.450620072s ago: executing program 1 (id=1455): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x0) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xec, 0xc, 0x0, 0x31, 0x0, 0x0, 0x2220, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, @perf_bp={0x0, 0xa}, 0x116941, 0x8, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x4}, 0x0, 0x1, 0xffffffffffffffff, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_CREATE(0x0, &(0x7f0000000580)=ANY=[], 0x50) r0 = socket$kcm(0x2b, 0x1, 0x0) setsockopt$sock_attach_bpf(r0, 0x6, 0x3, &(0x7f0000000200), 0x4) 3.229206736s ago: executing program 1 (id=1458): perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xe8, 0x0, 0x0, 0x7, 0x0, 0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xa}, 0x114905, 0x4, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x88e}, 0x0, 0x1, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000000c0)={0x1f, 0x15, &(0x7f0000000000)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x11}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x14, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x40, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) sendmsg$kcm(0xffffffffffffffff, 0x0, 0x0) r1 = perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x4a, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x1946}, 0x0, 0x0, 0x0, 0x8, 0x3fe, 0x7fffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000580)={0xffffffffffffffff}) recvmsg$unix(r2, &(0x7f0000000400)={0x0, 0x0, 0x0}, 0x12153) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000f80)={0x0, 0x5, &(0x7f00000005c0)=ANY=[@ANYBLOB="1808000000000000000000000000000018000000e5020000000000000000000095"], 0x0, 0x1, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @fallback=0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r3) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000040)={0x10, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xe}, 0x94) socket$kcm(0x10, 0x2, 0x0) bpf$MAP_LOOKUP_ELEM(0x1, 0x0, 0x0) r4 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)=ANY=[@ANYBLOB="3800000003140100a2bf58ad5500287d0900020073797a31000000000800410072786500140033006c6f"], 0x38}, 0x1, 0x0, 0x0, 0x4040815}, 0x800) socket$kcm(0xa, 0x922000000003, 0x11) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg$kcm(0xffffffffffffffff, 0x0, 0x106) recvmsg(0xffffffffffffffff, 0x0, 0x2) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f00000002c0)={0xffffffffffffffff, 0x0, 0x0}, 0x20) r5 = socket$kcm(0x2b, 0x1, 0x0) sendmsg$sock(r5, 0x0, 0x24000081) r6 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000780)={0x5, 0x3, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000120000"], &(0x7f0000000c00)='GPL\x00'}, 0x94) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000002c0)={r6, 0x4, 0x29, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) r7 = bpf$OBJ_GET_PROG(0x7, &(0x7f0000003a00)=@o_path={&(0x7f00000039c0)='./file0\x00', 0x0, 0x4000, r5}, 0x18) bpf$BPF_PROG_ATTACH(0x8, &(0x7f0000003980)={@fallback, r0, 0x5, 0x2, 0xffffffffffffffff, @void, @value=r7}, 0x20) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)) 3.072805681s ago: executing program 3 (id=1459): bpf$TOKEN_CREATE(0x24, 0x0, 0x0) perf_event_open(&(0x7f0000000040)={0x4, 0x80, 0xeb, 0x0, 0x0, 0x10, 0x0, 0x0, 0x2101, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x7, 0xffffffffffffffff}, 0x828, 0x0, 0x0, 0x0, 0x9, 0x800000, 0xffff, 0x0, 0x0, 0x0, 0x40}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xc) bpf$MAP_CREATE(0x0, 0x0, 0x64) bpf$PROG_LOAD(0x5, 0x0, 0x0) socket$kcm(0x10, 0x2, 0x0) bpf$MAP_CREATE_RINGBUF(0x0, 0x0, 0x0) r0 = socket$kcm(0x2a, 0x2, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(r0, 0x541b, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='cgroup.events\x00', 0x275a, 0x0) socket$kcm(0xa, 0x5, 0x0) write$cgroup_int(r1, 0x0, 0x0) r2 = perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x4a, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x1943}, 0x5000, 0x0, 0x0, 0x8, 0x3fe, 0x7fffffff, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) recvmsg$unix(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, 0x0}, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000f80)={0x5, 0x5, 0x0, &(0x7f0000000000)='syzkaller\x00', 0x1, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @fallback=0x13, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = socket$kcm(0xa, 0x5, 0x0) setsockopt$sock_attach_bpf(r4, 0x0, 0x29, 0x0, 0x20000) ioctl$PERF_EVENT_IOC_SET_BPF(r2, 0x40042408, r3) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x8, 0x830d}, 0x0, 0x2, 0xfffffffe, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r5, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000003c0)=@newtaction={0xd8, 0x30, 0xffff, 0xfffffffe, 0x0, {}, [{0xc4, 0x1, [@m_police={0x6c, 0x1, 0x0, 0x0, {{0xb}, {0x40, 0x2, 0x0, 0x1, [[@TCA_POLICE_TBF={0x3c, 0x1, {0x0, 0x0, 0x0, 0x0, 0x4, {0xfc}, {0x0, 0x0, 0x0, 0x6}}}]]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc}}}, @m_gact={0x54, 0x2, 0x0, 0x0, {{0x9}, {0x28, 0x2, 0x0, 0x1, [@TCA_GACT_PARMS={0x18, 0x2, {0x1}}, @TCA_GACT_PROB={0xc, 0x3, {0x2, 0x1419, 0x4}}]}, {0x4}, {0xc, 0x7, {0x1, 0x1}}, {0xc}}}]}]}, 0xd8}, 0x1, 0x0, 0x0, 0x20004000}, 0x0) 3.019929748s ago: executing program 4 (id=1460): socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)={0xffffffffffffffff, 0xffffffffffffffff}) socket$kcm(0x2b, 0x1, 0x0) close(r1) socket$kcm(0x2, 0x5, 0x84) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000013c0)={0x11, 0x3, &(0x7f0000000840)=ANY=[@ANYRES8=0x0], &(0x7f0000000300)='syzkaller\x00'}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000040)='contention_end\x00', r2}, 0x10) socket$kcm(0x10, 0x3, 0x10) socket$kcm(0x10, 0x2, 0x0) perf_event_open(&(0x7f0000000240)={0x1, 0x80, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x9) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)) perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x4a, 0x1, 0x0, 0x0, 0x0, 0x0, 0x8e02c, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, @perf_config_ext={0x0, 0x1946}, 0x0, 0x0, 0x0, 0x4, 0x3fe, 0x7fffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) socket$kcm(0x2b, 0x1, 0x0) r3 = socket$kcm(0x29, 0x7, 0x0) socket$kcm(0x10, 0x2, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)) socketpair(0x1, 0x1, 0x0, &(0x7f0000000200)) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000480)) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180)) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000000c0)={0x5, 0x3, &(0x7f0000000500)=ANY=[@ANYBLOB="1800000000001200000000000000000095"], &(0x7f0000000c00)='GPL\x00', 0x0, 0x0, 0x0, 0x41100}, 0x94) perf_event_open(&(0x7f0000000380)={0x0, 0x80, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x2, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={0x0, 0x1}, 0x80000, 0x4000000000000ca, 0x0, 0x0, 0x0, 0xe9b0, 0x0, 0x0, 0xe, 0x0, 0x8}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) recvmsg$unix(r0, &(0x7f00000013c0)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x1c0) socket$kcm(0x29, 0x0, 0x0) r5 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000640)={0x2, 0x80, 0xec, 0x0, 0x0, 0x0, 0x0, 0x480000000000000b, 0x954b, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x1, @perf_config_ext={0x76, 0x1ef7}, 0x11efa, 0x4, 0x98, 0x0, 0x2, 0xfffff271, 0xfffc, 0x0, 0x0, 0x0, 0x20}, r5, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x5, 0x5, &(0x7f00000005c0)=ANY=[@ANYBLOB="1808000000000000000000000000000018000000e5020000000000000000000095"], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback=0x1d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) write$cgroup_subtree(r4, &(0x7f0000000340)=ANY=[@ANYRES8=r1, @ANYRESHEX=r3, @ANYRES16=r3], 0x9a) 2.858534991s ago: executing program 2 (id=1461): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x6, 0x5, &(0x7f0000000100)=@framed={{0x18, 0x2, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x3}, [@call={0x85, 0x0, 0x0, 0x2c}, @call={0x85, 0x0, 0x0, 0x5}]}, &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x3}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r0, 0x0, 0x2107, 0x0, &(0x7f0000000100), 0x0, 0x1008, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x50) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x3, 0x3, &(0x7f0000000000)=@framed={{0x7a, 0xa, 0x0, 0xff00, 0x0, 0x71, 0x10, 0x4f}}, &(0x7f0000000480)='syzkaller\x00'}, 0x80) 2.799021026s ago: executing program 3 (id=1462): bpf$PROG_LOAD(0x5, 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x0, 0x80, 0x4a, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x8}, 0x0, 0x0, 0x0, 0x8, 0x3fe, 0x7fffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) socket$kcm(0x10, 0x3, 0x10) close(0xffffffffffffffff) socket$kcm(0xa, 0x2, 0x73) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x1, 0xd, 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x4a, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, @perf_config_ext={0x0, 0x1946}, 0x0, 0x0, 0x0, 0x4, 0x3fe, 0x7fffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f00000002c0)={0x5, 0x80, 0x52, 0x9, 0x0, 0x0, 0x0, 0x4, 0x82, 0xaaae307ffaf7c05d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7d, 0x0, @perf_config_ext={0x3, 0x8001}, 0x0, 0x2e, 0xfffffbff, 0x3, 0x3, 0x109, 0x6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x2}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$kcm(0x2, 0x922000000001, 0x106) setsockopt$sock_attach_bpf(r0, 0x1, 0xd, &(0x7f0000000000), 0xff7b) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xee, 0x0, 0x0, 0x8, 0x0, 0x0, 0x2101, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0, 0x2}, 0x10828, 0x0, 0x0, 0x0, 0x0, 0x800000, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000680)={0x11, 0x3, &(0x7f0000000100)=ANY=[@ANYBLOB="1800000000000000000000000000000195"], 0x0}, 0x94) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000680)={0x11, 0x3, &(0x7f0000000100)=ANY=[], &(0x7f00000000c0)='syzkaller\x00'}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f00000001c0)='inet_sk_error_report\x00', r1}, 0x10) r2 = socket$kcm(0xa, 0x1, 0x106) sendmsg$kcm(r2, &(0x7f0000000140)={0x0, 0x0, 0x0}, 0x20000011) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000680)={0x11, 0x3, &(0x7f0000000100)=ANY=[], &(0x7f00000000c0)='syzkaller\x00'}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f00000001c0)='inet_sk_error_report\x00', r3}, 0x10) sendmsg$kcm(r2, &(0x7f0000000780)={&(0x7f0000000000)=@in6={0xa, 0x0, 0x0, @dev, 0x2}, 0xff3c, 0x0}, 0xe07e872420dfefca) r4 = socket$kcm(0x10, 0x3, 0x10) sendmsg$kcm(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000140)="1400000023000b6c8cfffdfccabb00f90429fc60", 0x14}], 0x1}, 0x2400c000) r5 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000040)}], 0x1}, 0x24000000) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) recvmsg$unix(0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x1c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x8, 0x830d}, 0x0, 0x2, 0xfffffffe, 0x0, 0x9, 0x0, 0x0, 0x0, 0x8, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) 2.738331708s ago: executing program 4 (id=1463): socket$kcm(0x2, 0x922000000001, 0x106) perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x4a, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x1946}, 0x0, 0x0, 0x0, 0x8, 0x3fe, 0x7fffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000780)={0x5, 0x3, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000012000000000000"], &(0x7f0000000c00)='GPL\x00'}, 0x94) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000002c0)={r0, 0x4, 0x29, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) bpf$PROG_LOAD(0x5, 0x0, 0x0) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x8, 0x830d}, 0x0, 0x2, 0xfffffffe, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000000000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$kcm(0x10, 0x2, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x3a, 0x1, 0x0, 0x0, 0x0, 0x7fef, 0x82, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7b, 0x1, @perf_config_ext={0x407fff, 0xaea}, 0x14105, 0x2e, 0xfffffbff, 0x3, 0x2, 0xfffffffc, 0x6, 0x0, 0x0, 0x0, 0xa9e6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9) ioctl$TUNSETIFF(r1, 0x400454ca, 0x0) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xec, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2101, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x7, 0xffffffffffffffff}, 0x828, 0x0, 0x0, 0x0, 0x9, 0xd2d, 0x0, 0x0, 0x0, 0x0, 0x40}, 0x0, 0x3, 0xffffffffffffffff, 0x0) socket$kcm(0x10, 0x2, 0x10) socket$kcm(0x2c, 0x3, 0x0) socket$kcm(0x2c, 0x3, 0x0) r2 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000001840)=[{&(0x7f0000000580)="6700000011008188040f56ecdb4cb9cca7480ef434000000e3bd6efb440009000e000a0010000000ba80010000005a8c3774fa0af3dc59a933c1e7a6d3361d83b20000319cdf5656826edaaa11032701c61ec666d482078ccebcb9a4f187f7a4e98f09cdc264", 0x66}], 0x1}, 0x0) 2.615779661s ago: executing program 2 (id=1464): r0 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000200)={&(0x7f0000000280)=ANY=[@ANYBLOB="9feb010018000000000000000c0000000c00000004000000020000000000000f0400000000005f"], 0x0, 0x28}, 0x20) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000140)=ANY=[@ANYBLOB="0200000004000000040000000100000080000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32=r0, @ANYBLOB="0000000001000000000000005ceb6b959898169fb2cf00000000000000020000070000000000"], 0x48) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) close(r2) openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TUNSETOFFLOAD(r2, 0xc004743e, 0x110e22ffef) ioctl$TUNGETVNETLE(r2, 0x40107446, &(0x7f00000000c0)) sendmsg$NFT_MSG_GETCHAIN(r1, &(0x7f0000001600)={&(0x7f0000001480)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f00000015c0)={&(0x7f00000014c0)=ANY=[@ANYBLOB="cc000000040a0101000000000000000001"], 0xcc}, 0x1, 0x0, 0x0, 0x40880}, 0x4000000) socket$kcm(0x10, 0x2, 0x0) socket$kcm(0x29, 0x2, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000240)) perf_event_open(&(0x7f0000000100)={0x2, 0x80, 0x52, 0x1, 0x0, 0x0, 0x0, 0x7fef, 0x82, 0xd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7d, 0x1, @perf_config_ext={0x407fff, 0xaea}, 0x14105, 0x2e, 0xfffffbff, 0x3, 0x2, 0x0, 0x6, 0x0, 0x0, 0x0, 0xa9e6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9) perf_event_open(&(0x7f0000000440)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x8, 0x830d}, 0x0, 0x2, 0xfffffffe, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x3) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x3, 0xc, &(0x7f00000003c0)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000610000001801000020646c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000001700000095"], &(0x7f0000000200)='GPL\x00', 0x6, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.net/syz0\x00', 0x1ff) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040), 0x200002, 0x0) perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x56, 0x1, 0x0, 0x0, 0x0, 0x7fef, 0x82, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7b, 0x1, @perf_config_ext={0x407fff, 0xaea}, 0x14105, 0x2e, 0xfffffbff, 0x3, 0x2, 0x0, 0x6, 0x0, 0x0, 0x0, 0xa9e6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9) syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000240)='ns/user\x00') perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xf, 0x5}, 0x100e64, 0xc78, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r4, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x0) recvmsg$unix(r3, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000280)=[@cred={{0x1c}}, @rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}, @rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x10}}, @cred={{0x1c}}, @rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0xc8}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1d, 0x0, 0x0, &(0x7f0000000000)='GPL\x00', 0x4}, 0x94) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'wlan0\x00', 0x200}) socketpair(0x1, 0x1, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r5, 0x8946, &(0x7f0000000080)) r6 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000000)='blkio.bfq.empty_time\x00', 0x0, 0x0) ioctl$TUNSETSNDBUF(r6, 0x400454d4, &(0x7f0000000100)) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000001c0)) 2.539919226s ago: executing program 3 (id=1465): r0 = perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xec, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x2}, 0x114905, 0x4, 0x0, 0x1, 0x0, 0x0, 0x1}, 0x0, 0x1, 0xffffffffffffffff, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback=0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1da}, 0x27) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r1) r2 = socket$kcm(0x11, 0x200000000000002, 0x300) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000001c0)={0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0xfffffef2, 0x10, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, &(0x7f00000003c0)=[{0x0, 0x2, 0x0, 0xa}, {0x90010022}]}, 0x94) close(r4) recvmsg$unix(r3, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x0) r6 = socket$kcm(0x11, 0x200000000000002, 0x300) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) close(r8) recvmsg$unix(r7, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x0) setsockopt$sock_attach_bpf(r6, 0x107, 0x12, &(0x7f00000008c0)=r9, 0x4) setsockopt$sock_attach_bpf(r2, 0x107, 0x12, &(0x7f00000008c0)=r5, 0x4) r10 = socket$kcm(0x10, 0x2, 0x0) write$cgroup_subtree(r10, &(0x7f0000000000)=ANY=[@ANYBLOB="25390000290003"], 0x33fe0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r11 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_MSG_GETSETELEM(r11, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000500)={0x20, 0xd, 0xa, 0x201, 0x0, 0x0, {0xa, 0x0, 0x1}, [@NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}]}, 0x20}, 0x1, 0x0, 0x0, 0x24000801}, 0x8000) 2.475952385s ago: executing program 0 (id=1466): socket$nl_netfilter(0x10, 0x3, 0xc) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x8, 0x830d}, 0x0, 0x2, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000000000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x4a, 0x1, 0x0, 0x0, 0x0, 0x0, 0x2040, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x1946}, 0x2, 0x0, 0x0, 0x8, 0x3fe, 0x7fffffff, 0x0, 0x0, 0x0, 0x0, 0x8000000000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r0) bpf$PROG_LOAD(0x5, &(0x7f0000000900)={0x7, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x28}, 0x94) sendmsg$NFQNL_MSG_CONFIG(0xffffffffffffffff, 0x0, 0x24000050) socket$nl_rdma(0x10, 0x3, 0x14) socketpair$unix(0x1, 0x5, 0x0, 0x0) close(0xffffffffffffffff) perf_event_open(&(0x7f0000000380)={0x0, 0x80, 0x0, 0x7, 0x0, 0x4, 0x0, 0x0, 0x2, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={0x0, 0x1}, 0x8052b, 0xca, 0x1, 0x0, 0x0, 0x400000, 0x0, 0x0, 0xe, 0x0, 0x8}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0}, 0x90) write$cgroup_subtree(0xffffffffffffffff, 0x0, 0xcfa4) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) sendmsg$NFT_BATCH(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000500)=ANY=[@ANYBLOB="140000001000010000000000000000000300000a50000000060a010400000000000000000a0000040900010073797a31000000000900020073797a320000000024000480200001800d00010073796e70726f7879000000000c00028006000140b4b40000140000"], 0x78}, 0x1, 0x0, 0x0, 0x4000850}, 0x24044010) bpf$PROG_LOAD(0x5, &(0x7f0000000400)={0x16, 0x13, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018010000786c252500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000000000008500000006000000180100002020702500000000002020207b1ad8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000080000000"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x33, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x4a, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x2, 0x1946}, 0x0, 0x0, 0x0, 0x8, 0x7fe, 0x7fffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000740)={0x0, 0x5, &(0x7f0000000000)=ANY=[@ANYRES64, @ANYRES32, @ANYBLOB='\x00\x00\x00\x00\x00'], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x1000}, 0x94) r3 = socket$kcm(0xa, 0x2, 0x73) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x8, 0x830d}, 0x0, 0x2, 0xfffffffe}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg$inet(r3, &(0x7f0000001180)={&(0x7f0000000000)={0xa, 0x0, @empty}, 0xffac, &(0x7f0000001080)=[{&(0x7f0000000040)="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", 0xffa0}, {&(0x7f0000001040)="9d7fcf3efc63f4a6a555ba8b4726d7ccaf8a207100e69cfac4377876021d7131b838059f96bd206d4776368ed2a92432e5af71", 0x33}], 0x2, &(0x7f00000010c0)=[@ip_tos_int={{0x18, 0x29, 0x36}}, @ip_tos_u8={{0x38, 0x29, 0x3b}}, @ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @empty, @loopback}}}], 0x50}, 0x0) 1.953672203s ago: executing program 4 (id=1467): socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r1, 0x8b04, 0x0) close(0xffffffffffffffff) close(0xffffffffffffffff) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r2, 0x0, 0x48000) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r3, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000a80)=ANY=[@ANYBLOB="140000001000010000000000000000000200000a80000000060a010400000000000000000a0000050900010073797a3100000000540004802c000180090001007866726d000000001c000280050003000a0000000800024000000003080001400000001210000180090001006d61737100000000140001800e000100627974656f726465720000000900020073797a32"], 0xe0}, 0x1, 0x0, 0x0, 0x8890}, 0x24000000) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_GET(r4, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000003c0)={0x9c, 0x0, 0x1, 0x505, 0x0, 0x0, {0xa, 0x0, 0x5}, [@CTA_TUPLE_ORIG={0x44, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @mcast1}, {0x14, 0x4, @mcast2}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}, @CTA_TUPLE_ZONE={0x6}]}, @CTA_TUPLE_ORIG={0x3c, 0x1, 0x0, 0x1, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @mcast2}, {0x14, 0x4, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}}}]}, @CTA_TIMEOUT={0x8}]}, 0x9c}}, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r5, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB="2800000044000900fffffffffddbdf250400000004001f0010000180"], 0x28}, 0x1, 0x0, 0x0, 0x4044004}, 0x0) recvmsg$unix(r0, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000480)}, 0x0) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000c00)=ANY=[@ANYRES8, @ANYBLOB='>'], 0x12) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r6, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000005c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a03000000000000000000070000000900010073797a30000000005c000000090a010400000000000000000700000008000a40000000000900020073797a31000000000900010073797a30000000000800054000000020200011800a00010071756f7461000000100002800c00014000000000000000003c0000000c0a01010000000000000000070000000900020073797a31000000000900010073797a3000000000100003800c000080080003400000000214000000"], 0xe0}}, 0x20008844) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r7, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000002c0)=ANY=[@ANYBLOB="5c00000002060500000000000000000000000000050004000000000005000100070000000900020073797a320000000005000500000000001400078008001240000008cd0800134000000e760d000300686173683a6d6163000000003e4ba1b764c5cdea879cae46b7fd3c64b612badb6a8b6021e6da1847d848c08e30f6d88c165fb97cd052b865622bf9d1cbfb08798790e409586c843cf2b9274318"], 0x5c}, 0x1, 0x0, 0x0, 0x91}, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) r8 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TUNSETOFFLOAD(r8, 0xc004743e, 0x110e22fff6) ioctl$TUNGETVNETLE(0xffffffffffffffff, 0x4010744d, &(0x7f0000000180)) 1.95282328s ago: executing program 3 (id=1468): r0 = socket$nl_route(0x10, 0x3, 0x0) socket$kcm(0x2, 0x922000000001, 0x106) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) socket$kcm(0x11, 0x200000000000003, 0x300) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000780)={0x5, 0x3, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000001200000000000000000095"], &(0x7f0000000c00)='GPL\x00'}, 0x94) bpf$BPF_PROG_TEST_RUN(0x1c, 0x0, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000440)=ANY=[@ANYBLOB="1200000033000000080000000200000000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="00008000"/28], 0x48) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000140)={r1, &(0x7f00000002c0), 0x0}, 0x20) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000300)=ANY=[@ANYBLOB="200000001000010700000000000000000a0000000c0002006e6c3830323131"], 0x20}, 0x1, 0x0, 0x0, 0x20000000}, 0x40050) recvmsg(r2, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000440)=[{&(0x7f0000000140)=""/104, 0x68}, {&(0x7f00000001c0)=""/68, 0x44}, {&(0x7f0000000240)=""/129, 0x81}, {&(0x7f00000011c0)=""/4096, 0x1000}, {&(0x7f00000031c0)=""/4092, 0xffc}, {&(0x7f00000003c0)=""/112, 0xfffffe6d}], 0x6}, 0x10002) sendmsg$RDMA_NLDEV_CMD_STAT_DEL(0xffffffffffffffff, &(0x7f0000000a40)={&(0x7f0000000980)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000a00)={&(0x7f00000009c0)=ANY=[@ANYBLOB="280000451214040029bd7000fedbdf250800150001000000080015000200000008004f0000000000"], 0x28}, 0x1, 0x0, 0x0, 0x40000}, 0x44011) sendmsg$nl_generic(r2, &(0x7f00000000c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000080)={&(0x7f0000000840)={0x108, 0x41, 0x300, 0x70bd2b, 0x25dfdbfe, {0x10}, [@nested={0x20, 0x11e, 0x0, 0x1, [@typed={0x14, 0xbe, 0x0, 0x0, @ipv6=@dev={0xfe, 0x80, '\x00', 0x11}}, @nested={0x4, 0x32}, @nested={0x4, 0x142}]}, @generic="2b713202cece490e0776052ad2525cc1e0d460503c669cc6bec62ec1e8dd4fabb6cdc53c7a7603b558118b436968e7fdef99b8d74b8d6e72cc8bd4ca5ef6d5e079fe11c8fbaaa6e03df60083606a5580dd07db2fdf863636e9cb5566905678afca7bfb596d20f33cc14c6ed9dd22bcc43e20179f64b98204ec927b92d6aabc67f8d45b0bdb40583b9421e0404db42a47b7cb1005cb62dcebc127d04fc6ffb3cf3ce2e6c3b7a1c9f24a7238986ed63baa926136e7c296c51661eea48ac6e903583d6d576f643ec1523e06fb20b10368c7132f20"]}, 0x108}, 0x1, 0x0, 0x0, 0x8010}, 0x8040) bpf$BPF_PROG_QUERY(0x10, 0x0, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000300)={0x6, 0x3, &(0x7f0000000500)=ANY=[@ANYRESDEC], 0x0, 0x0, 0x0, 0x0, 0x41100}, 0x94) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000006c0)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='syzkaller\x00'}, 0x94) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8fedcb7907009875f37538e486dd6317ce6203c23c00fe80000000000000875a65969ff57b00000000000000000000000000ac1414aa06"], 0xfdef) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000700)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f00000021c0)=ANY=[@ANYBLOB="0c0200001b00000228bd7000ffdbdf2564010101000000000000000000000000ffffffff0000000000000000000000044e2200000200a0a0320000009a23ddf05e062ac751c7b27aa794db2ab9b0a4d73e50063d4f1e1fab639ea05acb63bed778ec14c1e6c7a20436eebf20836ec45310c6282f2a288ecd939953d9ae71e587bf62249b9daf688b9443382664c40c", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="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"], 0x20c}, 0x1, 0x0, 0x0, 0x800}, 0x4) sendmsg$nl_route_sched(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000003c0)=@newtaction={0x64, 0x30, 0x200, 0x0, 0xf7ffffff, {}, [{0x50, 0x1, [@m_ct={0x4c, 0x1, 0x0, 0x0, {{0x7}, {0x24, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0xfdb, 0x0, 0xffffffffffffffff}}, @TCA_CT_MARK={0x8, 0x10}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x64}, 0x1, 0x0, 0x0, 0x20004000}, 0x10000000) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000a80)) gettid() 1.287784432s ago: executing program 2 (id=1469): bpf$TOKEN_CREATE(0x24, 0x0, 0x0) perf_event_open(&(0x7f0000000040)={0x4, 0x80, 0xeb, 0x0, 0x0, 0x10, 0x0, 0x0, 0x2101, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x7, 0xffffffffffffffff}, 0x828, 0x0, 0x0, 0x0, 0x9, 0x800000, 0xffff, 0x0, 0x0, 0x0, 0x40}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xc) bpf$MAP_CREATE(0x0, 0x0, 0x64) bpf$PROG_LOAD(0x5, 0x0, 0x0) socket$kcm(0x10, 0x2, 0x0) r0 = bpf$MAP_CREATE_RINGBUF(0x0, 0x0, 0x0) r1 = socket$kcm(0x2a, 0x2, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(r1, 0x541b, &(0x7f0000000140)) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000000240)={r0, &(0x7f0000000180)="30f7e2e2970088aeda4c53a4d7fa7af5960af9eed80784fccc827c4b", &(0x7f00000001c0)=""/94}, 0x20) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000005c0)={&(0x7f0000000040)='percpu_free_percpu\x00'}, 0x10) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='cgroup.events\x00', 0x275a, 0x0) socket$kcm(0xa, 0x5, 0x0) write$cgroup_int(r2, 0x0, 0x0) r3 = perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x4a, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x1943}, 0x5000, 0x0, 0x0, 0x8, 0x3fe, 0x7fffffff, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) recvmsg$unix(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, 0x0}, 0x0) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000f80)={0x5, 0x5, &(0x7f00000005c0)=ANY=[@ANYBLOB="1808000000000000000000000000000018"], &(0x7f0000000000)='syzkaller\x00', 0x1, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @fallback=0x13, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r5 = socket$kcm(0xa, 0x5, 0x0) setsockopt$sock_attach_bpf(r5, 0x0, 0x29, 0x0, 0x20000) ioctl$PERF_EVENT_IOC_SET_BPF(r3, 0x40042408, r4) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x8, 0x830d}, 0x0, 0x2, 0xfffffffe, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r6, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000003c0)=@newtaction={0xd8, 0x30, 0xffff, 0xfffffffe, 0x0, {}, [{0xc4, 0x1, [@m_police={0x6c, 0x1, 0x0, 0x0, {{0xb}, {0x40, 0x2, 0x0, 0x1, [[@TCA_POLICE_TBF={0x3c, 0x1, {0x0, 0x0, 0x0, 0x0, 0x4, {0xfc}, {0x0, 0x0, 0x0, 0x6}}}]]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc}}}, @m_gact={0x54, 0x2, 0x0, 0x0, {{0x9}, {0x28, 0x2, 0x0, 0x1, [@TCA_GACT_PARMS={0x18, 0x2, {0x1}}, @TCA_GACT_PROB={0xc, 0x3, {0x2, 0x1419, 0x4}}]}, {0x4}, {0xc, 0x7, {0x1, 0x1}}, {0xc}}}]}]}, 0xd8}, 0x1, 0x0, 0x0, 0x20004000}, 0x0) 1.183607609s ago: executing program 0 (id=1470): r0 = socket$kcm(0x29, 0x7, 0x0) r1 = bpf$PROG_LOAD(0x5, 0x0, 0x0) r2 = perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x4a, 0x1, 0x0, 0x0, 0x0, 0x0, 0x2040, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000540), 0x8}, 0x2, 0x7, 0x200, 0x9, 0x3fe, 0x7fffffff, 0x0, 0x0, 0x0, 0x0, 0x8000000000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) socketpair(0x1, 0x5, 0x0, &(0x7f0000000000)) ioctl$PERF_EVENT_IOC_SET_FILTER(r2, 0x8983, &(0x7f00000000c0)='\x02\x00\x00\x00\xbc$j\xfef;q1\xff\xd3r\xa3\xc81U\x8ez.F\xce\xfb\x9c\x19\xf3v\x88\x91\xbct\xb0\x1bLq\x15\x00\xad\t\x13\xf5U\x02\xc9d6q\xc3\xa5\xcd\x01t\r=\xad-\x13\xb0 U\xaaC\xc388\x13\xc6H\x0f \x03\x9e\xa98\xa1\xc3\xe9\x06C\xd4\xb5\x18}4\xa9yA8\x1fQ\xdfN\x8e\xd7m\xee\xb8N\x98\xef\xff\xddR\xec~c\xcb\x93\x84\x7f\\x6\xedZ\x82\xa0\x1by\x17\x1a\xc8\x98\x99\x0f') r3 = bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=@base={0x10, 0x101, 0x5, 0x6, 0x20, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x3, 0x1}, 0x50) setsockopt$sock_attach_bpf(r0, 0x1, 0x32, &(0x7f0000000380)=r1, 0x4) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x4, 0x9, &(0x7f0000000780)=@framed={{0x18, 0x2, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0xa}, [@tail_call={{0x18, 0x2, 0x1, 0x0, r3}}, @call={0x85, 0x0, 0x0, 0x50}]}, &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x9, '\x00', 0x0, @fallback=0x2a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x2}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r4, 0x0, 0xe, 0x0, &(0x7f0000000440)='/\x00'/14, 0x0, 0x0, 0x0, 0x0, 0x2f, 0x0, 0x0}, 0x50) r5 = socket$kcm(0x1e, 0x4, 0x0) sendmsg$kcm(r5, 0x0, 0x0) socket(0x840000000002, 0x3, 0xff) perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x4a, 0x1, 0x0, 0x0, 0x0, 0x4, 0x0, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x3, 0x8000001946}, 0x0, 0x0, 0xffffffff, 0x2, 0x3fe, 0x800}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) r6 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f0000000340)=ANY=[], 0x0, 0x34, 0x0, 0x3}, 0x28) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x17, &(0x7f00000009c0)=ANY=[@ANYBLOB="b7080000000000007b8af8ff00000000b7080000060000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb702000008000000182300004aa7e0bba546bee3e11b8d44c55703f2cd3d76387e648047c466d5bedcefc7d3cc8bce1bf513afc1f1bb68a6960ccbb38efa34b5e0b53a51ab868ca541357653270fa18d8f7b2629", @ANYRES32, @ANYBLOB="0000000000000000b70500000800000085000000a5000000186b00000f000000000000000000000185000000c00000008500000043000000184b0000f9ffffff00000000000000000260e03d7f0000001841000006000000000000000000000085000000d4000000"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, r6, 0xc}, 0x94) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x8, 0x830d}, 0x0, 0x2, 0xfffffffe}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x13, 0x4, &(0x7f0000000000)=@framed={{0x18, 0x0, 0x0, 0x0, 0x1}, [@ldst={0x1, 0x2, 0x3, 0x2, 0x6, 0x1a}]}, &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x35, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) r8 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) r9 = perf_event_open(&(0x7f0000000640)={0x2, 0x80, 0xec, 0x0, 0x0, 0x0, 0x0, 0x480000000000000b, 0x954b, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x1, @perf_config_ext={0x76, 0x1ef7}, 0x11efa, 0x4, 0x98, 0x0, 0x2, 0xfffff271, 0xfffc, 0x0, 0x0, 0x0, 0x20}, r8, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r10 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x5, 0x5, &(0x7f00000005c0)=ANY=[@ANYBLOB="1808000000000000000000000000000018000000e5020000000000000000000095"], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback=0x1d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r9, 0x40042408, r10) sendmsg$IPCTNL_MSG_CT_DELETE(r7, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)={0x24, 0x2, 0x1, 0x101, 0x0, 0x0, {0x0, 0x0, 0x5}, [@CTA_MARK_MASK={0x8}, @CTA_MARK={0x8, 0x8, 0x1, 0x0, 0x8}]}, 0x24}, 0x1, 0x0, 0x0, 0x4004808}, 0x4004040) r11 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r11, &(0x7f0000000040)={0x0, 0x0, 0x0}, 0x0) r12 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r12, &(0x7f0000000040)={0x3, 0x0, &(0x7f0000000340)={&(0x7f0000000480)=ANY=[@ANYBLOB="020400030a000000000700000000000003000600000000000200000000000000000000000000000002000100000000000000020d00000000030005000000000002000000ac141400000000a469f0edefa5ea11da000000000072713944bd9e8ceea955d932bbc11c74ba2d0ca2cbdace4525966d42ce242e7dbd680889d6d7372d217d7bc78e458b1790ac6432acf39117a683f118a163c10c274fc97797ad61c95a4945e9f93172e6446594f6"], 0x50}, 0x1, 0x7}, 0x0) sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="640000000001010400000000141a000002000000240001801400018008000100e000000108000200e00000010c00028005000100000000002400028014000180080001000000000008000200ac1e00010c00028005000100000000000800"], 0x64}}, 0x0) r13 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r13, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000280)=ANY=[@ANYBLOB="4c00000000010104000000000000000002000000240001801400018008000100e000000108000200e00000010c00028005000100"], 0x4c}}, 0x0) 1.119625326s ago: executing program 3 (id=1471): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=@base={0x2, 0x4, 0x4, 0x9}, 0x48) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="0d00000006000000040000000100000001000000", @ANYRES32=r0], 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000440)={{r1}, &(0x7f0000000840), &(0x7f0000000340)=r0}, 0x20) (async) close(0x3) bpf$MAP_DELETE_ELEM(0x3, &(0x7f0000000380)={r1, &(0x7f0000000900)}, 0x20) (async) socket$nl_netfilter(0x10, 0x3, 0xc) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x0, 0x0, 0x0, &(0x7f0000000100)='GPL\x00'}, 0x94) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'ip6tnl0\x00', 0x210}) (async) syz_clone(0x200000, &(0x7f0000000180)="4e6258ca23c51ba8b35945e3f652c0fce2e0b2dbac790e02e71eff3ebb25e7ef928779bf45f0c554d5703bb3592b11", 0x2f, 0x0, 0x0, 0x0) (async) socketpair(0x1, 0x3, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r2, 0x891d, &(0x7f0000001a80)='lo:\x96o8\x14d\xa1\xba\xda\xd1\xa0J\x12tQ\xb16\xe3\xd7\\b\x8b\x1f\xa1Y\xad4\x90\x9d`\xd2\x98\x00\x00\x00 \'Y\x17]\x15c\xcaR\xdd\x98OC\x89\xff\xe6\x84\xe2\x05\x80w\xd2|D\x8dK\x14Bx\xcbuH\xc2\xeec\xbf\xc8>Y\x1a\xfc\x1f9OB\x81\x89\xb7l\xed}\xe5\x186\xc5q@n\xb4\xb6s\xb0\x00\x00\x00\x00\x02\b\x00\x00\xda\xef\xecE\xec\xd5I\xb2\x9b\xfe\x8d\x90?\x00\xe9\xe4~g:\xc1\xb2ak\x96\xbb\xa7\xe2\xc0\xdc\xf9Q\b\xeb\x01\x00\x00\x00\xd3\r7\x8e\xabd\x0ftp\x82\xae\xd2\x15\x8e+c\xf6\xbf\xe14>\xa6-\xa5c\xde\xd7\xab\xea\x1f\xd5s2\x9cVF\xd5\x18\xfe\x0f\x8f \x01\x00\x00\xb1\x88\xebW_\xa5\xe1\xf6\x8aj\xca\xf8m\xab\xe8\x99\xeb\xe1\xde\x8at\x1c\x80\xfc\xb0\x95\xa2\xa7\xd7,Y]E8\x83X\xf5F\xdc\x88-\xf5\xb0\xb5^\xdb\x1a\xb6\xaa\x14\xe2\rh^J-\xd1\xfc\xfa 6(%\x1c\xb5\xbf\xb6\x90\xb4\xc2\x7f]/\xb3\xe7\xc9\'\x94\xcfIo\xdf\x04\x95\xb5\x06\x84\x1fH>\xda\xc5\x04 \x94\x88\xeb\'\xd4;6\x7f\xd9\x99-\x1b|G\x8d\xd4\xb9%\xaaQ\xa0K\x10\x1f\x9c,\x113\x7f\x03\x93\xe1\xcc\xe7f\r\xf3\xff0\f\x82%_\x92\x8b\xc4\xb9\xd9\xe7\xf2\xe4\xc1i\x03\x9d\xdd\x1bj\xdf\xacg\xe3\xa0S\xd3\x8a\xe1n\x97\xea\xf5\xa0\'\v\xe9\xa0\xf1 f\xaan\xcf\xb5i\xb6d\xbc\x92\v\xd58\x16\b\xb3_:\xa4!\ny\xc4&\nWMM\xa8\xc4\v\x9f\x01o\xf4\xab&\xb6\x17\x02!\xed\xff\xee$\xc89\x8cB0\xd1\xa8\xd4\xe6K0\xe1\xa3TS\x18\xe6x\x1f%P\x9fU)\x83E\n\x90M\r.\x85gn_\xb2\xe9\x8a\x1c\xe3\x93\xd8\xbc\xb6N\xc3\xe1\xafh\xa0iF\xdcq\xf9\x17\xd9i\x844E\x1a\x13\x9a\xe6\xd3\xab:PM\xfbe\xfe9\xd9\x94\x1dx\xd6\x03b\xf7\x10N\xd1\x93\rU\x7fy\x18tE\xf1*\x9a0Z\x9f\xdc{\x13\xf6\xb7\xf7\xe6=\x9cD\x108\x8eS\xa0\xd0\xa7\tn\xd9\xae\xc0\x18~x[\x85Y\xb2\x82w\x150\x97\xba\xe6\xca\xb1\xa3\x02\x14^\xbdZ\xae\xf5/\xcf\xb8\xea8Uw\x92`\"2\x81j\xbb\x87+\x89\xc50xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r4, 0x89f1, &(0x7f0000000080)) 1.09834894s ago: executing program 2 (id=1472): bpf$TOKEN_CREATE(0x24, 0x0, 0x0) perf_event_open(&(0x7f0000000040)={0x4, 0x80, 0xeb, 0x0, 0x0, 0x10, 0x0, 0x0, 0x2101, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x7, 0xffffffffffffffff}, 0x828, 0x0, 0x0, 0x0, 0x9, 0x800000, 0xffff, 0x0, 0x0, 0x0, 0x40}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xc) bpf$MAP_CREATE(0x0, 0x0, 0x64) bpf$PROG_LOAD(0x5, 0x0, 0x0) socket$kcm(0x10, 0x2, 0x0) bpf$MAP_CREATE_RINGBUF(0x0, 0x0, 0x0) r0 = socket$kcm(0x2a, 0x2, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(r0, 0x541b, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='cgroup.events\x00', 0x275a, 0x0) socket$kcm(0xa, 0x5, 0x0) write$cgroup_int(r1, 0x0, 0x0) r2 = perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x4a, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x1943}, 0x5000, 0x0, 0x0, 0x8, 0x3fe, 0x7fffffff, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) recvmsg$unix(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, 0x0}, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000f80)={0x5, 0x5, 0x0, &(0x7f0000000000)='syzkaller\x00', 0x1, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @fallback=0x13, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = socket$kcm(0xa, 0x5, 0x0) setsockopt$sock_attach_bpf(r4, 0x0, 0x29, 0x0, 0x20000) ioctl$PERF_EVENT_IOC_SET_BPF(r2, 0x40042408, r3) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x8, 0x830d}, 0x0, 0x2, 0xfffffffe, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r5, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000003c0)=@newtaction={0xd8, 0x30, 0xffff, 0xfffffffe, 0x0, {}, [{0xc4, 0x1, [@m_police={0x6c, 0x1, 0x0, 0x0, {{0xb}, {0x40, 0x2, 0x0, 0x1, [[@TCA_POLICE_TBF={0x3c, 0x1, {0x0, 0x0, 0x0, 0x0, 0x4, {0xfc}, {0x0, 0x0, 0x0, 0x6}}}]]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc}}}, @m_gact={0x54, 0x2, 0x0, 0x0, {{0x9}, {0x28, 0x2, 0x0, 0x1, [@TCA_GACT_PARMS={0x18, 0x2, {0x1}}, @TCA_GACT_PROB={0xc, 0x3, {0x2, 0x1419, 0x4}}]}, {0x4}, {0xc, 0x7, {0x1, 0x1}}, {0xc}}}]}]}, 0xd8}, 0x1, 0x0, 0x0, 0x20004000}, 0x0) 763.275547ms ago: executing program 2 (id=1473): socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)={0xffffffffffffffff, 0xffffffffffffffff}) socket$kcm(0x2b, 0x1, 0x0) close(r1) socket$kcm(0x2, 0x5, 0x84) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000013c0)={0x11, 0x3, &(0x7f0000000840)=ANY=[@ANYRES8=0x0], &(0x7f0000000300)='syzkaller\x00'}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000040)='contention_end\x00', r2}, 0x10) socket$kcm(0x10, 0x3, 0x10) socket$kcm(0x10, 0x2, 0x0) perf_event_open(&(0x7f0000000240)={0x1, 0x80, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x9) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)) perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x4a, 0x1, 0x0, 0x0, 0x0, 0x0, 0x8e02c, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, @perf_config_ext={0x0, 0x1946}, 0x0, 0x0, 0x0, 0x4, 0x3fe, 0x7fffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) socket$kcm(0x2b, 0x1, 0x0) r3 = socket$kcm(0x29, 0x7, 0x0) socket$kcm(0x10, 0x2, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)) socketpair(0x1, 0x1, 0x0, &(0x7f0000000200)) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000480)) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180)) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000000c0)={0x5, 0x3, &(0x7f0000000500)=ANY=[@ANYBLOB="1800000000001200000000000000000095"], &(0x7f0000000c00)='GPL\x00', 0x0, 0x0, 0x0, 0x41100}, 0x94) perf_event_open(&(0x7f0000000380)={0x0, 0x80, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x2, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={0x0, 0x1}, 0x80000, 0x4000000000000ca, 0x0, 0x0, 0x0, 0xe9b0, 0x0, 0x0, 0xe, 0x0, 0x8}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) recvmsg$unix(r0, &(0x7f00000013c0)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x1c0) socket$kcm(0x29, 0x0, 0x0) r5 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000640)={0x2, 0x80, 0xec, 0x0, 0x0, 0x0, 0x0, 0x480000000000000b, 0x954b, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x1, @perf_config_ext={0x76, 0x1ef7}, 0x11efa, 0x4, 0x98, 0x0, 0x2, 0xfffff271, 0xfffc, 0x0, 0x0, 0x0, 0x20}, r5, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x5, 0x5, &(0x7f00000005c0)=ANY=[@ANYBLOB="1808000000000000000000000000000018000000e5020000000000000000000095"], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback=0x1d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) write$cgroup_subtree(r4, &(0x7f0000000340)=ANY=[@ANYRES8=r1, @ANYRESHEX=r3, @ANYRES16=r3], 0x9a) 643.960456ms ago: executing program 3 (id=1474): bpf$TOKEN_CREATE(0x24, &(0x7f0000000080), 0x8) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000500)={0xc, 0x0, 0x0, &(0x7f0000000740)='syzkaller\x00', 0x2, 0x0, 0x0, 0x41100, 0x1, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(0xffffffffffffffff, 0x40042408, r0) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000640)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000004000000b703000000000000850000007200000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000400)={&(0x7f0000000040)='sched_switch\x00', r1}, 0x10) bpf$MAP_CREATE(0x0, 0x0, 0x48) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[], 0xfe33) bpf$PROG_LOAD(0x5, 0x0, 0x0) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d35, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x806, 0x0, 0xfffffffc, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xe, 0xe, &(0x7f0000001540)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x200000, 0x10, &(0x7f0000000000), 0x143}, 0x48) 404.403616ms ago: executing program 4 (id=1475): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000000c0)={0x7, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="1800210001fb248aa8000000000000009c000100000000009500000000000000"], &(0x7f00000005c0)='syzkaller\x00', 0x6}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000140)={0x1, 0x0, 0x0, 0x0, 0xe, 0x0, 0x0, 0x41100, 0x6c, '\x00', 0x0, @fallback=0xf, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0, &(0x7f00000000c0)=[0xffffffffffffffff, 0x1]}, 0x94) r0 = socket$kcm(0x11, 0x2, 0x0) r1 = socket$kcm(0x11, 0x200000000000002, 0x300) setsockopt$sock_attach_bpf(r1, 0x107, 0x12, &(0x7f00000000c0)=r0, 0x8) close(r0) r2 = socket$kcm(0x11, 0x2, 0x0) r3 = socket$kcm(0x11, 0x200000000000002, 0x300) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0}, 0x94) setsockopt$sock_attach_bpf(r3, 0x107, 0x12, &(0x7f00000000c0)=r2, 0x8) r4 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000000)='memory.events\x00', 0x0, 0x0) sendmsg$kcm(r4, &(0x7f0000000400)={&(0x7f0000000040)=@rc={0x1f, @any, 0xfe}, 0x80, &(0x7f00000002c0)=[{&(0x7f0000000600)="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", 0x1000}, {&(0x7f0000000180)='4j?', 0x3}, {&(0x7f00000001c0)="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", 0xfa}], 0x3, 0x0, 0xe0}, 0x24000045) r5 = socket$igmp6(0xa, 0x3, 0x2) bpf$TOKEN_CREATE(0x24, &(0x7f0000000440)={0x0, r5}, 0x8) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) 170.945261ms ago: executing program 2 (id=1476): perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x8, 0x830d}, 0x0, 0x2, 0xfffffffe}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x4a, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2106, 0x0, @perf_config_ext={0x0, 0x1946}, 0x0, 0x0, 0x0, 0x8, 0x3fe, 0x7fffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = socket$kcm(0x2, 0x200000000000002, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_EXP_GET(r1, &(0x7f00000062c0)={0x0, 0x0, &(0x7f0000006280)={&(0x7f0000006180)=ANY=[@ANYBLOB="3800000001020500000a000000000000020000092400"], 0x38}, 0x1, 0x0, 0x0, 0x4000}, 0x24000002) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='memory.stat\x00', 0x26e1, 0x0) setsockopt$sock_attach_bpf(r0, 0x1, 0x3e, &(0x7f0000000100)=r2, 0x4) bpf$MAP_CREATE(0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB="19000000040000000800"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000", @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) sendmsg$inet(0xffffffffffffffff, &(0x7f0000002480)={&(0x7f0000000000)={0x2, 0x0, @local}, 0x41, 0x0, 0x11}, 0x0) r3 = socket$kcm(0x2, 0x5, 0x84) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000300)={0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x56, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, &(0x7f00000003c0)=[{0x0, 0x2, 0x0, 0x9}]}, 0x94) socketpair$unix(0x1, 0x1, 0x0, 0x0) close(0xffffffffffffffff) recvmsg$unix(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x0) setsockopt$sock_attach_bpf(r3, 0x84, 0x64, &(0x7f0000000000)=r4, 0x10) sendmsg$inet(r3, &(0x7f0000000140)={&(0x7f0000000280)={0x2, 0x10, @local}, 0x10, &(0x7f0000000080)=[{&(0x7f0000001940)='{', 0xffc0}], 0x1}, 0x80d1) (fail_nth: 23) 0s ago: executing program 4 (id=1477): socket$kcm(0x2, 0x922000000001, 0x106) perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x4a, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x1946}, 0x0, 0x0, 0x0, 0x8, 0x3fe, 0x7fffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000780)={0x5, 0x3, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000012000000000000"], &(0x7f0000000c00)='GPL\x00'}, 0x94) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000002c0)={r0, 0x4, 0x29, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) bpf$PROG_LOAD(0x5, 0x0, 0x0) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x8, 0x830d}, 0x0, 0x2, 0xfffffffe, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000000000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$kcm(0x10, 0x2, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x3a, 0x1, 0x0, 0x0, 0x0, 0x7fef, 0x82, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7b, 0x1, @perf_config_ext={0x407fff, 0xaea}, 0x14105, 0x2e, 0xfffffbff, 0x3, 0x2, 0xfffffffc, 0x6, 0x0, 0x0, 0x0, 0xa9e6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9) ioctl$TUNSETIFF(r1, 0x400454ca, 0x0) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xec, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2101, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x7, 0xffffffffffffffff}, 0x828, 0x0, 0x0, 0x0, 0x9, 0xd2d, 0x0, 0x0, 0x0, 0x0, 0x40}, 0x0, 0x3, 0xffffffffffffffff, 0x0) socket$kcm(0x10, 0x2, 0x10) socket$kcm(0x2c, 0x3, 0x0) socket$kcm(0x2c, 0x3, 0x0) r2 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000001840)=[{&(0x7f0000000580)="6700000011008188040f56ecdb4cb9cca7480ef434000000e3bd6efb440009000e000a0010000000ba80010000005a8c3774fa0af3dc59a933c1e7a6d3361d83b20000319cdf5656826edaaa11032701c61ec666d482078ccebcb9a4f187f7a4e98f09cdc264", 0x66}], 0x1}, 0x0) kernel console output (not intermixed with test programs): netlink: 'syz.3.40': attribute type 29 has an invalid length. [ 101.091355][ T6086] netlink: 'syz.3.40': attribute type 29 has an invalid length. [ 101.628494][ T6097] netlink: 104 bytes leftover after parsing attributes in process `syz.4.44'. [ 103.682263][ T6109] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 103.811897][ T6115] netlink: 12 bytes leftover after parsing attributes in process `syz.0.46'. [ 103.825391][ T6115] netlink: 104 bytes leftover after parsing attributes in process `syz.0.46'. [ 104.000040][ T6112] netlink: 60 bytes leftover after parsing attributes in process `syz.2.49'. [ 104.123110][ T6116] netlink: 60 bytes leftover after parsing attributes in process `syz.2.49'. [ 106.284609][ T6151] netlink: 'syz.2.58': attribute type 2 has an invalid length. [ 106.292230][ T6151] netlink: 'syz.2.58': attribute type 8 has an invalid length. [ 106.476803][ T6151] netlink: 132 bytes leftover after parsing attributes in process `syz.2.58'. [ 107.754079][ T6165] netlink: 12 bytes leftover after parsing attributes in process `syz.1.62'. [ 107.779487][ T6165] netlink: 104 bytes leftover after parsing attributes in process `syz.1.62'. [ 107.854212][ T6166] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 108.034293][ T6168] netlink: 60 bytes leftover after parsing attributes in process `syz.3.64'. [ 108.045406][ T6168] netlink: 60 bytes leftover after parsing attributes in process `syz.3.64'. [ 108.622909][ T6172] warning: `syz.3.66' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211 [ 109.166396][ T6191] netlink: 60 bytes leftover after parsing attributes in process `syz.3.72'. [ 109.282321][ T6191] netlink: 60 bytes leftover after parsing attributes in process `syz.3.72'. [ 109.378256][ T6195] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 109.401312][ T6192] netlink: 1041 bytes leftover after parsing attributes in process `syz.3.72'. [ 111.125407][ T6214] netlink: 12 bytes leftover after parsing attributes in process `syz.4.79'. [ 111.425290][ T6217] netlink: 104 bytes leftover after parsing attributes in process `syz.4.79'. [ 111.459328][ T6218] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 112.084648][ T6228] netlink: 16 bytes leftover after parsing attributes in process `syz.1.85'. [ 112.366646][ T6238] netlink: 'syz.2.86': attribute type 39 has an invalid length. [ 112.416167][ T6238] veth0_macvtap: left promiscuous mode [ 112.489295][ T6240] netlink: 20 bytes leftover after parsing attributes in process `syz.1.88'. [ 113.609468][ T6261] lo speed is unknown, defaulting to 1000 [ 113.644506][ T6261] lo speed is unknown, defaulting to 1000 [ 113.721004][ T6255] netlink: 'syz.4.91': attribute type 2 has an invalid length. [ 113.754759][ T6261] lo speed is unknown, defaulting to 1000 [ 113.779568][ T6255] netlink: 'syz.4.91': attribute type 8 has an invalid length. [ 113.807934][ T6255] netlink: 132 bytes leftover after parsing attributes in process `syz.4.91'. [ 114.264513][ T6261] infiniband syz1: set active [ 114.272747][ T5973] lo speed is unknown, defaulting to 1000 [ 114.284991][ T6261] infiniband syz1: added lo [ 114.295569][ T6261] syz1: rxe_create_cq: returned err = -12 [ 114.305716][ T6261] infiniband syz1: Couldn't create ib_mad CQ [ 114.312204][ T6261] infiniband syz1: Couldn't open port 1 [ 114.410663][ T6261] RDS/IB: syz1: added [ 114.419139][ T6261] smc: adding ib device syz1 with port count 1 [ 114.428791][ T6261] smc: ib device syz1 port 1 has pnetid [ 114.440323][ T5973] lo speed is unknown, defaulting to 1000 [ 114.466694][ T6261] lo speed is unknown, defaulting to 1000 [ 114.937158][ T6261] lo speed is unknown, defaulting to 1000 [ 115.406898][ T6261] lo speed is unknown, defaulting to 1000 [ 115.890772][ T6261] lo speed is unknown, defaulting to 1000 [ 116.401156][ T6261] lo speed is unknown, defaulting to 1000 [ 116.448218][ T6265] netlink: 104 bytes leftover after parsing attributes in process `syz.0.93'. [ 116.817040][ T6269] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 116.902344][ T6274] netlink: 16 bytes leftover after parsing attributes in process `syz.0.97'. [ 117.253494][ T6280] netlink: 17279 bytes leftover after parsing attributes in process `syz.4.100'. [ 117.351340][ T6288] netlink: 20 bytes leftover after parsing attributes in process `syz.0.102'. [ 118.641413][ T6317] netlink: 192 bytes leftover after parsing attributes in process `syz.3.109'. [ 120.369694][ T6321] netlink: 'syz.1.107': attribute type 2 has an invalid length. [ 120.492306][ T6321] netlink: 'syz.1.107': attribute type 8 has an invalid length. [ 123.193184][ T6321] netlink: 132 bytes leftover after parsing attributes in process `syz.1.107'. [ 123.248093][ T6323] sched: DL replenish lagged too much [ 123.394262][ T6325] netlink: 104 bytes leftover after parsing attributes in process `syz.4.113'. [ 123.767825][ T6333] netlink: 20 bytes leftover after parsing attributes in process `syz.3.115'. [ 124.487837][ T6349] netlink: 'syz.2.120': attribute type 2 has an invalid length. [ 124.539740][ T6349] netlink: 'syz.2.120': attribute type 8 has an invalid length. [ 124.693800][ T6349] netlink: 132 bytes leftover after parsing attributes in process `syz.2.120'. [ 125.528338][ T6368] netlink: 192 bytes leftover after parsing attributes in process `syz.0.125'. [ 125.785508][ T6371] lo speed is unknown, defaulting to 1000 [ 129.228262][ T6396] netlink: 'syz.3.134': attribute type 2 has an invalid length. [ 129.294941][ T6396] netlink: 'syz.3.134': attribute type 8 has an invalid length. [ 129.350492][ T6396] netlink: 132 bytes leftover after parsing attributes in process `syz.3.134'. [ 129.644206][ T6407] bridge0: port 3(veth1_to_team) entered blocking state [ 129.651826][ T6407] bridge0: port 3(veth1_to_team) entered disabled state [ 129.699550][ T6407] veth1_to_team: entered allmulticast mode [ 129.738450][ T6407] veth1_to_team: entered promiscuous mode [ 129.761880][ T6407] bridge0: port 3(veth1_to_team) entered blocking state [ 129.769236][ T6407] bridge0: port 3(veth1_to_team) entered forwarding state [ 131.845477][ T6446] netlink: 'syz.0.150': attribute type 10 has an invalid length. [ 131.853966][ T6446] netlink: 55 bytes leftover after parsing attributes in process `syz.0.150'. [ 132.138694][ T6453] bridge0: port 3(veth1_to_team) entered blocking state [ 132.174959][ T6453] bridge0: port 3(veth1_to_team) entered disabled state [ 132.182233][ T6453] veth1_to_team: entered allmulticast mode [ 132.285969][ T6453] veth1_to_team: entered promiscuous mode [ 132.300680][ T6453] bridge0: port 3(veth1_to_team) entered blocking state [ 132.307899][ T6453] bridge0: port 3(veth1_to_team) entered forwarding state [ 132.979608][ T1307] ieee802154 phy0 wpan0: encryption failed: -22 [ 132.986415][ T1307] ieee802154 phy1 wpan1: encryption failed: -22 [ 133.068728][ T6471] netlink: 160 bytes leftover after parsing attributes in process `syz.0.155'. [ 133.101000][ T6467] delete_channel: no stack [ 134.790904][ T6492] lo speed is unknown, defaulting to 1000 [ 135.164220][ T6506] netlink: 'syz.4.165': attribute type 10 has an invalid length. [ 135.197553][ T6506] netlink: 55 bytes leftover after parsing attributes in process `syz.4.165'. [ 135.666791][ T6501] delete_channel: no stack [ 135.742949][ T6502] netlink: 160 bytes leftover after parsing attributes in process `syz.3.166'. [ 136.895758][ T6528] netlink: 'syz.3.171': attribute type 2 has an invalid length. [ 136.949991][ T6528] netlink: 'syz.3.171': attribute type 8 has an invalid length. [ 137.422540][ T6528] netlink: 132 bytes leftover after parsing attributes in process `syz.3.171'. [ 139.681441][ T6549] netlink: 'syz.2.178': attribute type 33 has an invalid length. [ 139.690202][ T6549] netlink: 152 bytes leftover after parsing attributes in process `syz.2.178'. [ 140.243833][ T6558] netlink: 60 bytes leftover after parsing attributes in process `syz.3.181'. [ 140.985289][ T6565] netlink: 'syz.1.184': attribute type 10 has an invalid length. [ 141.088829][ T6565] netlink: 55 bytes leftover after parsing attributes in process `syz.1.184'. [ 141.143351][ T6570] netlink: 20 bytes leftover after parsing attributes in process `syz.0.185'. [ 142.701096][ T6610] netlink: 20 bytes leftover after parsing attributes in process `syz.4.197'. [ 145.277933][ T6638] netlink: 'syz.3.205': attribute type 15 has an invalid length. [ 145.403468][ T6638] netlink: 'syz.3.205': attribute type 7 has an invalid length. [ 145.712675][ T6638] netlink: 52 bytes leftover after parsing attributes in process `syz.3.205'. [ 146.758904][ T6659] netlink: 20 bytes leftover after parsing attributes in process `syz.4.211'. [ 146.950818][ T6663] netlink: 112 bytes leftover after parsing attributes in process `syz.2.213'. [ 146.960957][ T6663] netlink: 56 bytes leftover after parsing attributes in process `syz.2.213'. [ 147.001415][ T6665] netlink: 'syz.0.212': attribute type 21 has an invalid length. [ 147.011720][ T5879] Bluetooth: hci3: ISO packet for unknown connection handle 2622 [ 147.020780][ T6665] IPv6: NLM_F_CREATE should be specified when creating new route [ 147.135065][ T6665] IPv6: Can't replace route, no match found [ 147.817819][ T6684] netlink: 'syz.4.221': attribute type 39 has an invalid length. [ 147.857313][ T6685] FAULT_INJECTION: forcing a failure. [ 147.857313][ T6685] name failslab, interval 1, probability 0, space 0, times 1 [ 147.953222][ T6685] CPU: 1 UID: 0 PID: 6685 Comm: syz.2.220 Not tainted 6.17.0-rc1-syzkaller-gdc0fe956144d #0 PREEMPT(full) [ 147.953253][ T6685] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 147.953264][ T6685] Call Trace: [ 147.953273][ T6685] [ 147.953283][ T6685] dump_stack_lvl+0x189/0x250 [ 147.953314][ T6685] ? __pfx____ratelimit+0x10/0x10 [ 147.953343][ T6685] ? __pfx_dump_stack_lvl+0x10/0x10 [ 147.953368][ T6685] ? __pfx__printk+0x10/0x10 [ 147.953407][ T6685] ? __pfx___might_resched+0x10/0x10 [ 147.953426][ T6685] ? fs_reclaim_acquire+0x7d/0x100 [ 147.953453][ T6685] should_fail_ex+0x414/0x560 [ 147.953488][ T6685] should_failslab+0xa8/0x100 [ 147.953521][ T6685] __kmalloc_cache_noprof+0x70/0x3d0 [ 147.953547][ T6685] ? nf_tables_newflowtable+0x90e/0x20d0 [ 147.953579][ T6685] nf_tables_newflowtable+0x90e/0x20d0 [ 147.953630][ T6685] ? __lock_acquire+0xa42/0xd20 [ 147.953665][ T6685] ? __pfx_nf_tables_newflowtable+0x10/0x10 [ 147.953718][ T6685] ? __nla_parse+0x40/0x60 [ 147.953756][ T6685] nfnetlink_rcv+0x1132/0x2520 [ 147.953833][ T6685] ? __pfx_nfnetlink_rcv+0x10/0x10 [ 147.953890][ T6685] ? ref_tracker_free+0x63a/0x7d0 [ 147.953965][ T6685] ? __netlink_deliver_tap+0x807/0x850 [ 147.953993][ T6685] ? netlink_deliver_tap+0x2e/0x1b0 [ 147.954050][ T6685] netlink_unicast+0x82c/0x9e0 [ 147.954092][ T6685] ? __pfx_netlink_unicast+0x10/0x10 [ 147.954122][ T6685] ? netlink_sendmsg+0x642/0xb30 [ 147.954148][ T6685] ? skb_put+0x11b/0x210 [ 147.954175][ T6685] netlink_sendmsg+0x805/0xb30 [ 147.954219][ T6685] ? __pfx_netlink_sendmsg+0x10/0x10 [ 147.954254][ T6685] ? aa_sock_msg_perm+0xf1/0x1d0 [ 147.954288][ T6685] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 147.954310][ T6685] ? __pfx_netlink_sendmsg+0x10/0x10 [ 147.954340][ T6685] __sock_sendmsg+0x21c/0x270 [ 147.954372][ T6685] ____sys_sendmsg+0x505/0x830 [ 147.954404][ T6685] ? __pfx_____sys_sendmsg+0x10/0x10 [ 147.954440][ T6685] ? import_iovec+0x74/0xa0 [ 147.954471][ T6685] ___sys_sendmsg+0x21f/0x2a0 [ 147.954496][ T6685] ? __pfx____sys_sendmsg+0x10/0x10 [ 147.954576][ T6685] ? __fget_files+0x2a/0x420 [ 147.954595][ T6685] ? __fget_files+0x3a0/0x420 [ 147.954760][ T6685] __x64_sys_sendmsg+0x19b/0x260 [ 147.954787][ T6685] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 147.954825][ T6685] ? __pfx_ksys_write+0x10/0x10 [ 147.954849][ T6685] ? rcu_is_watching+0x15/0xb0 [ 147.954877][ T6685] ? do_syscall_64+0xbe/0x3b0 [ 147.954912][ T6685] do_syscall_64+0xfa/0x3b0 [ 147.954938][ T6685] ? lockdep_hardirqs_on+0x9c/0x150 [ 147.954964][ T6685] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 147.954984][ T6685] ? clear_bhb_loop+0x60/0xb0 [ 147.955011][ T6685] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 147.955031][ T6685] RIP: 0033:0x7fc137b8ebe9 [ 147.955051][ T6685] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 147.955068][ T6685] RSP: 002b:00007fc138ae2038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 147.955091][ T6685] RAX: ffffffffffffffda RBX: 00007fc137db5fa0 RCX: 00007fc137b8ebe9 [ 147.955105][ T6685] RDX: 0000000000000000 RSI: 0000200000000080 RDI: 0000000000000005 [ 147.955118][ T6685] RBP: 00007fc138ae2090 R08: 0000000000000000 R09: 0000000000000000 [ 147.955129][ T6685] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 147.955141][ T6685] R13: 00007fc137db6038 R14: 00007fc137db5fa0 R15: 00007ffd862232d8 [ 147.955181][ T6685] [ 147.961435][ T6684] veth0_macvtap: left promiscuous mode [ 148.714342][ T6696] netlink: 20 bytes leftover after parsing attributes in process `syz.3.225'. [ 148.922724][ T6699] netlink: 24 bytes leftover after parsing attributes in process `syz.1.227'. [ 148.946680][ T6700] netlink: 'syz.2.226': attribute type 5 has an invalid length. [ 149.565164][ T6715] netlink: 'syz.1.230': attribute type 10 has an invalid length. [ 149.917096][ T6717] netlink: 'syz.4.231': attribute type 21 has an invalid length. [ 150.038619][ T6717] netlink: 128 bytes leftover after parsing attributes in process `syz.4.231'. [ 150.690648][ T6715] bridge0: port 3(macsec0) entered blocking state [ 150.724079][ T6715] bridge0: port 3(macsec0) entered disabled state [ 150.761999][ T6715] macsec0: entered allmulticast mode [ 150.795238][ T6715] veth1_macvtap: entered allmulticast mode [ 150.813351][ T6715] macsec0: entered promiscuous mode [ 150.837955][ T6715] bridge0: port 3(macsec0) entered blocking state [ 150.844679][ T6715] bridge0: port 3(macsec0) entered forwarding state [ 150.894687][ T6717] netlink: 3 bytes leftover after parsing attributes in process `syz.4.231'. [ 151.074348][ T6730] netlink: 'syz.0.234': attribute type 10 has an invalid length. [ 151.098445][ T6733] netlink: 48 bytes leftover after parsing attributes in process `syz.3.236'. [ 151.364155][ T6739] FAULT_INJECTION: forcing a failure. [ 151.364155][ T6739] name fail_usercopy, interval 1, probability 0, space 0, times 1 [ 151.378528][ T6739] CPU: 1 UID: 0 PID: 6739 Comm: syz.2.237 Not tainted 6.17.0-rc1-syzkaller-gdc0fe956144d #0 PREEMPT(full) [ 151.378557][ T6739] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 151.378569][ T6739] Call Trace: [ 151.378579][ T6739] [ 151.378589][ T6739] dump_stack_lvl+0x189/0x250 [ 151.378623][ T6739] ? __pfx____ratelimit+0x10/0x10 [ 151.378655][ T6739] ? __pfx_dump_stack_lvl+0x10/0x10 [ 151.378683][ T6739] ? __pfx__printk+0x10/0x10 [ 151.378718][ T6739] ? __might_fault+0xb0/0x130 [ 151.378758][ T6739] ? __might_fault+0xb0/0x130 [ 151.378808][ T6739] should_fail_ex+0x414/0x560 [ 151.378872][ T6739] _copy_from_user+0x2d/0xb0 [ 151.378903][ T6739] ___sys_sendmsg+0x158/0x2a0 [ 151.378939][ T6739] ? __pfx____sys_sendmsg+0x10/0x10 [ 151.379036][ T6739] ? __fget_files+0x2a/0x420 [ 151.379100][ T6739] ? __fget_files+0x2a/0x420 [ 151.379120][ T6739] ? __fget_files+0x3a0/0x420 [ 151.379176][ T6739] __x64_sys_sendmsg+0x19b/0x260 [ 151.379212][ T6739] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 151.379269][ T6739] ? __pfx_ksys_write+0x10/0x10 [ 151.379294][ T6739] ? rcu_is_watching+0x15/0xb0 [ 151.379341][ T6739] ? do_syscall_64+0xbe/0x3b0 [ 151.379386][ T6739] do_syscall_64+0xfa/0x3b0 [ 151.379413][ T6739] ? lockdep_hardirqs_on+0x9c/0x150 [ 151.379443][ T6739] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 151.379464][ T6739] ? clear_bhb_loop+0x60/0xb0 [ 151.379498][ T6739] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 151.379519][ T6739] RIP: 0033:0x7fc137b8ebe9 [ 151.379541][ T6739] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 151.379557][ T6739] RSP: 002b:00007fc138ae2038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 151.379579][ T6739] RAX: ffffffffffffffda RBX: 00007fc137db5fa0 RCX: 00007fc137b8ebe9 [ 151.379594][ T6739] RDX: 0000000000000000 RSI: 0000200000000480 RDI: 0000000000000005 [ 151.379606][ T6739] RBP: 00007fc138ae2090 R08: 0000000000000000 R09: 0000000000000000 [ 151.379618][ T6739] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 151.379629][ T6739] R13: 00007fc137db6038 R14: 00007fc137db5fa0 R15: 00007ffd862232d8 [ 151.379698][ T6739] [ 151.853878][ T6742] netlink: 20 bytes leftover after parsing attributes in process `syz.2.238'. [ 152.856488][ T6743] delete_channel: no stack [ 153.614739][ T6730] team0: Device dummy0 is up. Set it down before adding it as a team port [ 153.631003][ T6745] netlink: 160 bytes leftover after parsing attributes in process `syz.2.239'. [ 153.795571][ T6750] netlink: 8 bytes leftover after parsing attributes in process `syz.3.240'. [ 153.820091][ T6749] netlink: 'syz.0.241': attribute type 39 has an invalid length. [ 153.919456][ T6749] veth0_macvtap: left promiscuous mode [ 154.043029][ T6757] openvswitch: netlink: Flow set message rejected, Key attribute missing. [ 154.280048][ T6767] netlink: 'syz.1.248': attribute type 29 has an invalid length. [ 154.290898][ T6768] netlink: 'syz.2.245': attribute type 29 has an invalid length. [ 154.299668][ T6767] netlink: 'syz.1.248': attribute type 29 has an invalid length. [ 154.311799][ T6767] netlink: 147608 bytes leftover after parsing attributes in process `syz.1.248'. [ 154.313775][ T6768] netlink: 'syz.2.245': attribute type 29 has an invalid length. [ 154.324999][ T6767] netlink: 'syz.1.248': attribute type 1 has an invalid length. [ 154.348643][ T6767] netlink: 'syz.1.248': attribute type 2 has an invalid length. [ 154.357001][ T6767] netlink: 61939 bytes leftover after parsing attributes in process `syz.1.248'. [ 154.371636][ T6760] netlink: 'syz.2.245': attribute type 10 has an invalid length. [ 154.458503][ T6760] bond0: (slave wlan1): Enslaving as an active interface with an up link [ 154.508183][ T6775] netlink: 20 bytes leftover after parsing attributes in process `syz.0.249'. [ 154.988312][ T6773] netlink: 'syz.3.250': attribute type 10 has an invalid length. [ 155.034335][ T6773] team0: Device ipvlan1 failed to register rx_handler [ 155.253518][ T6796] netlink: 8 bytes leftover after parsing attributes in process `syz.1.256'. [ 156.582537][ T6817] netlink: 'syz.2.263': attribute type 1 has an invalid length. [ 157.033672][ T6811] netlink: 168 bytes leftover after parsing attributes in process `syz.0.262'. [ 157.478528][ T6824] netlink: 55 bytes leftover after parsing attributes in process `syz.0.262'. [ 157.662317][ T6827] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 157.845557][ T6832] netlink: 8 bytes leftover after parsing attributes in process `syz.4.267'. [ 158.763902][ T6842] rdma_rxe: rxe_newlink: failed to add lo [ 158.797195][ T6843] netlink: 160 bytes leftover after parsing attributes in process `syz.2.271'. [ 158.849821][ T6840] delete_channel: no stack [ 158.920198][ T6849] netlink: 8 bytes leftover after parsing attributes in process `syz.1.274'. [ 158.929355][ T6849] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 159.166631][ T30] audit: type=1107 audit(1755275957.796:2): pid=6853 uid=0 auid=4294967295 ses=4294967295 subj=unconfined msg='PÅA2ö!Õlé,i'¿Ö^QŽ:V¹É»#W"y#”ŒóÂióvÁ²' [ 159.745450][ T6859] FAULT_INJECTION: forcing a failure. [ 159.745450][ T6859] name failslab, interval 1, probability 0, space 0, times 0 [ 159.762888][ T6859] CPU: 1 UID: 0 PID: 6859 Comm: syz.2.278 Not tainted 6.17.0-rc1-syzkaller-gdc0fe956144d #0 PREEMPT(full) [ 159.762918][ T6859] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 159.762929][ T6859] Call Trace: [ 159.762938][ T6859] [ 159.762946][ T6859] dump_stack_lvl+0x189/0x250 [ 159.762976][ T6859] ? __pfx____ratelimit+0x10/0x10 [ 159.763004][ T6859] ? __pfx_dump_stack_lvl+0x10/0x10 [ 159.763028][ T6859] ? __pfx__printk+0x10/0x10 [ 159.763063][ T6859] ? __pfx___might_resched+0x10/0x10 [ 159.763081][ T6859] ? fs_reclaim_acquire+0x7d/0x100 [ 159.763106][ T6859] should_fail_ex+0x414/0x560 [ 159.763138][ T6859] ? page_pool_create_percpu+0x32a/0xbe0 [ 159.763160][ T6859] should_failslab+0xa8/0x100 [ 159.763191][ T6859] __kvmalloc_node_noprof+0x161/0x5f0 [ 159.763220][ T6859] ? page_pool_create_percpu+0x32a/0xbe0 [ 159.763249][ T6859] page_pool_create_percpu+0x32a/0xbe0 [ 159.763273][ T6859] ? bpf_test_run_xdp_live+0x1b5/0x1b10 [ 159.763309][ T6859] bpf_test_run_xdp_live+0x1ca/0x1b10 [ 159.763342][ T6859] ? __mutex_unlock_slowpath+0x1a1/0x760 [ 159.763396][ T6859] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 159.763437][ T6859] ? __pfx_bpf_test_run_xdp_live+0x10/0x10 [ 159.763464][ T6859] ? 0xffffffffa02057c0 [ 159.763484][ T6859] ? 0xffffffffa02057c0 [ 159.763559][ T6859] ? __pfx_xdp_test_run_init_page+0x10/0x10 [ 159.763597][ T6859] ? bpf_prog_test_run_xdp+0x651/0x1000 [ 159.763632][ T6859] bpf_prog_test_run_xdp+0x713/0x1000 [ 159.763684][ T6859] ? irqentry_exit+0x74/0x90 [ 159.763714][ T6859] ? __pfx_bpf_prog_test_run_xdp+0x10/0x10 [ 159.763746][ T6859] ? __pfx_bpf_prog_test_run_xdp+0x10/0x10 [ 159.763775][ T6859] ? bpf_prog_test_run+0x2b5/0x340 [ 159.763806][ T6859] ? __pfx_bpf_prog_test_run_xdp+0x10/0x10 [ 159.763835][ T6859] bpf_prog_test_run+0x2c7/0x340 [ 159.763875][ T6859] __sys_bpf+0x581/0x870 [ 159.763904][ T6859] ? __pfx___sys_bpf+0x10/0x10 [ 159.763966][ T6859] __x64_sys_bpf+0x7c/0x90 [ 159.763992][ T6859] do_syscall_64+0xfa/0x3b0 [ 159.764021][ T6859] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 159.764040][ T6859] ? asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 159.764059][ T6859] ? clear_bhb_loop+0x60/0xb0 [ 159.764084][ T6859] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 159.764103][ T6859] RIP: 0033:0x7fc137b8ebe9 [ 159.764121][ T6859] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 159.764138][ T6859] RSP: 002b:00007fc138ae2038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 159.764160][ T6859] RAX: ffffffffffffffda RBX: 00007fc137db5fa0 RCX: 00007fc137b8ebe9 [ 159.764174][ T6859] RDX: 0000000000000050 RSI: 0000200000000000 RDI: 000000000000000a [ 159.764187][ T6859] RBP: 00007fc138ae2090 R08: 0000000000000000 R09: 0000000000000000 [ 159.764199][ T6859] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 159.764211][ T6859] R13: 00007fc137db6038 R14: 00007fc137db5fa0 R15: 00007ffd862232d8 [ 159.764245][ T6859] [ 159.764443][ T6859] page_pool_create_percpu() gave up with errno -12 [ 160.606507][ T6878] netlink: 212376 bytes leftover after parsing attributes in process `syz.3.282'. [ 160.633929][ T6877] validate_nla: 2 callbacks suppressed [ 160.633954][ T6877] netlink: 'syz.2.284': attribute type 10 has an invalid length. [ 160.881482][ T6877] hsr0: A HSR master's MTU cannot be greater than the smallest MTU of its slaves minus the HSR Tag length (6 octets). [ 161.091090][ T6887] rdma_rxe: rxe_newlink: failed to add lo [ 161.266879][ T6890] netlink: 'syz.2.290': attribute type 39 has an invalid length. [ 161.284996][ T6886] netlink: 160 bytes leftover after parsing attributes in process `syz.0.288'. [ 161.526145][ T6885] delete_channel: no stack [ 163.099411][ T6917] netlink: 63503 bytes leftover after parsing attributes in process `syz.2.297'. [ 163.133148][ T6917] netlink: 132 bytes leftover after parsing attributes in process `syz.2.297'. [ 163.277361][ T6919] netlink: 'syz.3.298': attribute type 39 has an invalid length. [ 163.955978][ T6934] netlink: 160 bytes leftover after parsing attributes in process `syz.1.303'. [ 164.007120][ T6931] delete_channel: no stack [ 164.387504][ T6951] netlink: 'syz.0.307': attribute type 39 has an invalid length. [ 165.171333][ T6968] lo speed is unknown, defaulting to 1000 [ 165.692896][ T6977] FAULT_INJECTION: forcing a failure. [ 165.692896][ T6977] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 165.706732][ T6977] CPU: 1 UID: 0 PID: 6977 Comm: syz.1.316 Not tainted 6.17.0-rc1-syzkaller-gdc0fe956144d #0 PREEMPT(full) [ 165.706761][ T6977] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 165.706782][ T6977] Call Trace: [ 165.706790][ T6977] [ 165.706799][ T6977] dump_stack_lvl+0x189/0x250 [ 165.706829][ T6977] ? __pfx____ratelimit+0x10/0x10 [ 165.706857][ T6977] ? __pfx_dump_stack_lvl+0x10/0x10 [ 165.706881][ T6977] ? __pfx__printk+0x10/0x10 [ 165.706928][ T6977] should_fail_ex+0x414/0x560 [ 165.706961][ T6977] strncpy_from_user+0x36/0x290 [ 165.706990][ T6977] getname_flags+0xf3/0x540 [ 165.707016][ T6977] do_sys_openat2+0xbc/0x1c0 [ 165.707035][ T6977] ? atomic_notifier_call_chain+0x26/0x180 [ 165.707060][ T6977] ? __pfx_do_sys_openat2+0x10/0x10 [ 165.707084][ T6977] ? notify_die+0x130/0x180 [ 165.707109][ T6977] ? __pfx_notify_die+0x10/0x10 [ 165.707126][ T6977] ? rcu_is_watching+0x15/0xb0 [ 165.707151][ T6977] __x64_sys_openat+0x138/0x170 [ 165.707179][ T6977] do_syscall_64+0xfa/0x3b0 [ 165.707205][ T6977] ? lockdep_hardirqs_on+0x9c/0x150 [ 165.707229][ T6977] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 165.707247][ T6977] ? clear_bhb_loop+0x60/0xb0 [ 165.707272][ T6977] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 165.707291][ T6977] RIP: 0033:0x7f98ab58d550 [ 165.707310][ T6977] Code: 48 89 44 24 20 75 93 44 89 54 24 0c e8 49 94 02 00 44 8b 54 24 0c 89 da 48 89 ee 41 89 c0 bf 9c ff ff ff b8 01 01 00 00 0f 05 <48> 3d 00 f0 ff ff 77 38 44 89 c7 89 44 24 0c e8 9c 94 02 00 8b 44 [ 165.707326][ T6977] RSP: 002b:00007f98ac442f10 EFLAGS: 00000293 ORIG_RAX: 0000000000000101 [ 165.707348][ T6977] RAX: ffffffffffffffda RBX: 0000000000000002 RCX: 00007f98ab58d550 [ 165.707362][ T6977] RDX: 0000000000000002 RSI: 00007f98ac442fa0 RDI: 00000000ffffff9c [ 165.707373][ T6977] RBP: 00007f98ac442fa0 R08: 0000000000000000 R09: 0000000000000000 [ 165.707385][ T6977] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000001 [ 165.707396][ T6977] R13: 00007f98ab7b6038 R14: 00007f98ab7b5fa0 R15: 00007ffc5bae7198 [ 165.707435][ T6977] [ 166.215734][ T6986] netlink: 'syz.0.319': attribute type 1 has an invalid length. [ 166.316338][ T6988] netlink: 160 bytes leftover after parsing attributes in process `syz.3.318'. [ 166.780309][ T6981] delete_channel: no stack [ 168.089194][ T7015] netlink: 'syz.0.325': attribute type 39 has an invalid length. [ 169.281677][ T7039] netlink: 4200 bytes leftover after parsing attributes in process `syz.4.334'. [ 169.624591][ T7049] netlink: 192 bytes leftover after parsing attributes in process `syz.1.338'. [ 170.063107][ T7055] netlink: 'syz.1.340': attribute type 10 has an invalid length. [ 170.070987][ T7055] netlink: 65015 bytes leftover after parsing attributes in process `syz.1.340'. [ 170.501901][ T7061] netlink: 'syz.3.342': attribute type 39 has an invalid length. [ 170.937478][ T7061] veth0_macvtap: left promiscuous mode [ 171.843717][ T7082] netlink: 160 bytes leftover after parsing attributes in process `syz.0.348'. [ 172.010586][ T7080] delete_channel: no stack [ 172.412819][ T7092] lo speed is unknown, defaulting to 1000 [ 173.067810][ T7110] netlink: 20 bytes leftover after parsing attributes in process `syz.4.358'. [ 173.085466][ T7113] netlink: 32 bytes leftover after parsing attributes in process `syz.0.357'. [ 173.577268][ T7121] netlink: 192 bytes leftover after parsing attributes in process `syz.0.362'. [ 173.721010][ T7124] netlink: 192 bytes leftover after parsing attributes in process `syz.3.363'. [ 173.752948][ T7125] netlink: 'syz.0.364': attribute type 21 has an invalid length. [ 173.770517][ T7125] netlink: 156 bytes leftover after parsing attributes in process `syz.0.364'. [ 173.822245][ T7127] netlink: 20 bytes leftover after parsing attributes in process `syz.0.364'. [ 174.237163][ T7128] delete_channel: no stack [ 175.287140][ T7146] __nla_validate_parse: 2 callbacks suppressed [ 175.287161][ T7146] netlink: 24032 bytes leftover after parsing attributes in process `syz.4.371'. [ 175.289957][ T7150] netlink: 60 bytes leftover after parsing attributes in process `syz.1.373'. [ 175.314863][ T7146] netlink: 104088 bytes leftover after parsing attributes in process `syz.4.371'. [ 175.346244][ T7150] unsupported nlmsg_type 40 [ 175.351431][ T7146] netlink: 24032 bytes leftover after parsing attributes in process `syz.4.371'. [ 175.628594][ T7157] netlink: 192 bytes leftover after parsing attributes in process `syz.3.374'. [ 175.790706][ T7162] netlink: 20 bytes leftover after parsing attributes in process `syz.1.376'. [ 175.937350][ T7168] netlink: 'syz.3.378': attribute type 10 has an invalid length. [ 176.385409][ T7174] FAULT_INJECTION: forcing a failure. [ 176.385409][ T7174] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 176.419618][ T7174] CPU: 0 UID: 0 PID: 7174 Comm: syz.0.380 Not tainted 6.17.0-rc1-syzkaller-gdc0fe956144d #0 PREEMPT(full) [ 176.419655][ T7174] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 176.419667][ T7174] Call Trace: [ 176.419680][ T7174] [ 176.419693][ T7174] dump_stack_lvl+0x189/0x250 [ 176.419732][ T7174] ? __pfx____ratelimit+0x10/0x10 [ 176.419770][ T7174] ? __pfx_dump_stack_lvl+0x10/0x10 [ 176.419806][ T7174] ? __pfx__printk+0x10/0x10 [ 176.419869][ T7174] ? __might_fault+0xb0/0x130 [ 176.419940][ T7174] should_fail_ex+0x414/0x560 [ 176.420010][ T7174] _copy_to_user+0x31/0xb0 [ 176.420057][ T7174] simple_read_from_buffer+0xe1/0x170 [ 176.420124][ T7174] proc_fail_nth_read+0x1b3/0x220 [ 176.420175][ T7174] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 176.420228][ T7174] ? rw_verify_area+0x2a6/0x4d0 [ 176.420260][ T7174] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 176.420302][ T7174] vfs_read+0x1fd/0xa30 [ 176.420336][ T7174] ? fdget_pos+0x247/0x320 [ 176.420385][ T7174] ? __pfx___mutex_lock+0x10/0x10 [ 176.420424][ T7174] ? __pfx_vfs_read+0x10/0x10 [ 176.420474][ T7174] ? __fget_files+0x2a/0x420 [ 176.420528][ T7174] ? __fget_files+0x3a0/0x420 [ 176.420557][ T7174] ? __fget_files+0x2a/0x420 [ 176.420639][ T7174] ksys_read+0x145/0x250 [ 176.420695][ T7174] ? __pfx_ksys_read+0x10/0x10 [ 176.420718][ T7174] ? rcu_is_watching+0x15/0xb0 [ 176.420789][ T7174] ? do_syscall_64+0xbe/0x3b0 [ 176.420851][ T7174] do_syscall_64+0xfa/0x3b0 [ 176.420879][ T7174] ? lockdep_hardirqs_on+0x9c/0x150 [ 176.420911][ T7174] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 176.420934][ T7174] ? clear_bhb_loop+0x60/0xb0 [ 176.420981][ T7174] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 176.421002][ T7174] RIP: 0033:0x7fdad3b8d5fc [ 176.421028][ T7174] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 176.421044][ T7174] RSP: 002b:00007fdad49de030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 176.421066][ T7174] RAX: ffffffffffffffda RBX: 00007fdad3db5fa0 RCX: 00007fdad3b8d5fc [ 176.421080][ T7174] RDX: 000000000000000f RSI: 00007fdad49de0a0 RDI: 0000000000000008 [ 176.421091][ T7174] RBP: 00007fdad49de090 R08: 0000000000000000 R09: 0000000000000000 [ 176.421103][ T7174] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 176.421114][ T7174] R13: 00007fdad3db6038 R14: 00007fdad3db5fa0 R15: 00007ffe054d7bb8 [ 176.421228][ T7174] [ 176.463510][ T7176] netlink: 160 bytes leftover after parsing attributes in process `syz.4.379'. [ 176.803374][ T7169] delete_channel: no stack [ 177.268406][ T7193] netlink: 60 bytes leftover after parsing attributes in process `syz.2.385'. [ 177.317993][ T7193] netlink: 60 bytes leftover after parsing attributes in process `syz.2.385'. [ 177.344369][ T7193] netlink: 60 bytes leftover after parsing attributes in process `syz.2.385'. [ 178.566556][ T7224] netlink: 'syz.4.396': attribute type 2 has an invalid length. [ 178.577123][ T7224] netlink: 'syz.4.396': attribute type 8 has an invalid length. [ 179.534299][ T7226] delete_channel: no stack [ 179.892211][ T7245] netlink: 'syz.0.403': attribute type 10 has an invalid length. [ 180.000321][ T7245] bond0: (slave dummy0): Enslaving as an active interface with an up link [ 180.265774][ T7256] netlink: 'syz.3.402': attribute type 31 has an invalid length. [ 181.045845][ T5233] udevd[5233]: worker [6118] terminated by signal 33 (Unknown signal 33) [ 181.055252][ T5233] udevd[5233]: worker [6118] failed while handling '/devices/virtual/block/loop3' [ 181.711770][ T7276] lo speed is unknown, defaulting to 1000 [ 182.370345][ T7311] netlink: 'syz.2.419': attribute type 1 has an invalid length. [ 182.403047][ T7311] bridge0: port 1(bridge_slave_0) entered learning state [ 183.441702][ T7334] netlink: 'syz.1.428': attribute type 29 has an invalid length. [ 184.509490][ T7359] netlink: 'syz.0.434': attribute type 2 has an invalid length. [ 184.962912][ T7359] netlink: 'syz.0.434': attribute type 8 has an invalid length. [ 185.600347][ T7359] __nla_validate_parse: 4 callbacks suppressed [ 185.600368][ T7359] netlink: 132 bytes leftover after parsing attributes in process `syz.0.434'. [ 185.796478][ T7363] netlink: 104 bytes leftover after parsing attributes in process `syz.3.435'. [ 186.818796][ T7340] netlink: 'syz.1.428': attribute type 29 has an invalid length. [ 187.274032][ T7388] netlink: 60 bytes leftover after parsing attributes in process `syz.0.442'. [ 187.308518][ T7391] netlink: 60 bytes leftover after parsing attributes in process `syz.0.442'. [ 187.345012][ T7388] netlink: 60 bytes leftover after parsing attributes in process `syz.0.442'. [ 187.385581][ T7393] rdma_rxe: rxe_newlink: failed to add lo [ 188.324917][ T7422] netlink: 'syz.3.451': attribute type 39 has an invalid length. [ 188.467730][ T7424] FAULT_INJECTION: forcing a failure. [ 188.467730][ T7424] name failslab, interval 1, probability 0, space 0, times 0 [ 188.525513][ T7424] CPU: 0 UID: 0 PID: 7424 Comm: syz.2.452 Not tainted 6.17.0-rc1-syzkaller-gdc0fe956144d #0 PREEMPT(full) [ 188.525544][ T7424] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 188.525555][ T7424] Call Trace: [ 188.525564][ T7424] [ 188.525573][ T7424] dump_stack_lvl+0x189/0x250 [ 188.525604][ T7424] ? __pfx____ratelimit+0x10/0x10 [ 188.525634][ T7424] ? __pfx_dump_stack_lvl+0x10/0x10 [ 188.525658][ T7424] ? __pfx__printk+0x10/0x10 [ 188.525707][ T7424] ? __pfx___might_resched+0x10/0x10 [ 188.525736][ T7424] should_fail_ex+0x414/0x560 [ 188.525771][ T7424] should_failslab+0xa8/0x100 [ 188.525806][ T7424] kmem_cache_alloc_node_noprof+0x76/0x3c0 [ 188.525835][ T7424] ? __alloc_skb+0x112/0x2d0 [ 188.525873][ T7424] __alloc_skb+0x112/0x2d0 [ 188.525911][ T7424] netlink_sendmsg+0x5c6/0xb30 [ 188.525956][ T7424] ? __pfx_netlink_sendmsg+0x10/0x10 [ 188.525991][ T7424] ? aa_sock_msg_perm+0xf1/0x1d0 [ 188.526024][ T7424] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 188.526047][ T7424] ? __pfx_netlink_sendmsg+0x10/0x10 [ 188.526078][ T7424] __sock_sendmsg+0x21c/0x270 [ 188.526109][ T7424] ____sys_sendmsg+0x505/0x830 [ 188.526141][ T7424] ? __pfx_____sys_sendmsg+0x10/0x10 [ 188.526181][ T7424] ? import_iovec+0x74/0xa0 [ 188.526211][ T7424] ___sys_sendmsg+0x21f/0x2a0 [ 188.526238][ T7424] ? __pfx____sys_sendmsg+0x10/0x10 [ 188.526296][ T7424] ? __fget_files+0x2a/0x420 [ 188.526339][ T7424] ? __fget_files+0x2a/0x420 [ 188.526356][ T7424] ? __fget_files+0x3a0/0x420 [ 188.526393][ T7424] __x64_sys_sendmsg+0x19b/0x260 [ 188.526427][ T7424] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 188.526466][ T7424] ? __pfx_ksys_write+0x10/0x10 [ 188.526490][ T7424] ? rcu_is_watching+0x15/0xb0 [ 188.526522][ T7424] ? do_syscall_64+0xbe/0x3b0 [ 188.526563][ T7424] do_syscall_64+0xfa/0x3b0 [ 188.526588][ T7424] ? lockdep_hardirqs_on+0x9c/0x150 [ 188.526615][ T7424] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 188.526635][ T7424] ? clear_bhb_loop+0x60/0xb0 [ 188.526662][ T7424] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 188.526689][ T7424] RIP: 0033:0x7fc137b8ebe9 [ 188.526710][ T7424] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 188.526727][ T7424] RSP: 002b:00007fc138ae2038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 188.526749][ T7424] RAX: ffffffffffffffda RBX: 00007fc137db5fa0 RCX: 00007fc137b8ebe9 [ 188.526764][ T7424] RDX: 0000000000000000 RSI: 0000200000000180 RDI: 0000000000000004 [ 188.526777][ T7424] RBP: 00007fc138ae2090 R08: 0000000000000000 R09: 0000000000000000 [ 188.526790][ T7424] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 188.526801][ T7424] R13: 00007fc137db6038 R14: 00007fc137db5fa0 R15: 00007ffd862232d8 [ 188.526845][ T7424] [ 188.618196][ T7435] FAULT_INJECTION: forcing a failure. [ 188.618196][ T7435] name failslab, interval 1, probability 0, space 0, times 0 [ 188.849882][ T7435] CPU: 1 UID: 0 PID: 7435 Comm: syz.4.454 Not tainted 6.17.0-rc1-syzkaller-gdc0fe956144d #0 PREEMPT(full) [ 188.849911][ T7435] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 188.849922][ T7435] Call Trace: [ 188.849931][ T7435] [ 188.849941][ T7435] dump_stack_lvl+0x189/0x250 [ 188.849971][ T7435] ? __pfx____ratelimit+0x10/0x10 [ 188.849999][ T7435] ? __pfx_dump_stack_lvl+0x10/0x10 [ 188.850024][ T7435] ? __pfx__printk+0x10/0x10 [ 188.850062][ T7435] ? __pfx___might_resched+0x10/0x10 [ 188.850079][ T7435] ? fs_reclaim_acquire+0x7d/0x100 [ 188.850107][ T7435] should_fail_ex+0x414/0x560 [ 188.850143][ T7435] should_failslab+0xa8/0x100 [ 188.850175][ T7435] __kmalloc_noprof+0xcb/0x4f0 [ 188.850201][ T7435] ? bpf_test_init+0xc2/0x170 [ 188.850235][ T7435] bpf_test_init+0xc2/0x170 [ 188.850269][ T7435] bpf_prog_test_run_xdp+0x37c/0x1000 [ 188.850324][ T7435] ? __pfx_bpf_prog_test_run_xdp+0x10/0x10 [ 188.850360][ T7435] ? __fget_files+0x2a/0x420 [ 188.850388][ T7435] ? __pfx_bpf_prog_test_run_xdp+0x10/0x10 [ 188.850417][ T7435] bpf_prog_test_run+0x2c7/0x340 [ 188.850462][ T7435] __sys_bpf+0x581/0x870 [ 188.850494][ T7435] ? __pfx___sys_bpf+0x10/0x10 [ 188.850540][ T7435] ? ksys_write+0x22a/0x250 [ 188.850572][ T7435] ? __pfx_ksys_write+0x10/0x10 [ 188.850613][ T7435] __x64_sys_bpf+0x7c/0x90 [ 188.850641][ T7435] do_syscall_64+0xfa/0x3b0 [ 188.850680][ T7435] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 188.850698][ T7435] ? asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 188.850717][ T7435] ? clear_bhb_loop+0x60/0xb0 [ 188.850744][ T7435] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 188.850763][ T7435] RIP: 0033:0x7fb12738ebe9 [ 188.850783][ T7435] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 188.850799][ T7435] RSP: 002b:00007fb1255d5038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 188.850821][ T7435] RAX: ffffffffffffffda RBX: 00007fb1275b6090 RCX: 00007fb12738ebe9 [ 188.850835][ T7435] RDX: 0000000000000048 RSI: 0000200000000600 RDI: 000000000000000a [ 188.850848][ T7435] RBP: 00007fb1255d5090 R08: 0000000000000000 R09: 0000000000000000 [ 188.850859][ T7435] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 188.850869][ T7435] R13: 00007fb1275b6128 R14: 00007fb1275b6090 R15: 00007ffded998188 [ 188.850913][ T7435] [ 189.244963][ T7444] syz1: rxe_newlink: already configured on lo [ 190.996883][ T7484] netlink: 'syz.0.467': attribute type 39 has an invalid length. [ 191.358203][ T7492] netlink: 12 bytes leftover after parsing attributes in process `syz.0.472'. [ 191.370896][ T7492] netlink: 104 bytes leftover after parsing attributes in process `syz.0.472'. [ 191.567311][ T7495] rdma_rxe: rxe_newlink: failed to add lo [ 191.957162][ T7508] netlink: 20 bytes leftover after parsing attributes in process `syz.4.479'. [ 192.450624][ T7508] netlink: 'syz.4.479': attribute type 10 has an invalid length. [ 192.514986][ T7508] 8021q: adding VLAN 0 to HW filter on device bond0 [ 192.564786][ T7508] team0: Port device bond0 added [ 192.621035][ T7518] netlink: 28 bytes leftover after parsing attributes in process `syz.1.481'. [ 192.642394][ T7518] netlink: 28 bytes leftover after parsing attributes in process `syz.1.481'. [ 192.679451][ T7518] netlink: 61967 bytes leftover after parsing attributes in process `syz.1.481'. [ 192.696419][ T7519] netlink: 'syz.2.482': attribute type 39 has an invalid length. [ 192.833950][ T7525] netlink: 68 bytes leftover after parsing attributes in process `syz.1.485'. [ 192.871200][ T7527] netlink: 12 bytes leftover after parsing attributes in process `syz.0.486'. [ 192.903578][ T7527] netlink: 104 bytes leftover after parsing attributes in process `syz.0.486'. [ 193.047573][ T7531] netlink: 4 bytes leftover after parsing attributes in process `syz.4.487'. [ 194.058986][ T7560] netlink: 'syz.3.499': attribute type 39 has an invalid length. [ 194.408968][ T1307] ieee802154 phy0 wpan0: encryption failed: -22 [ 194.415692][ T1307] ieee802154 phy1 wpan1: encryption failed: -22 [ 196.019371][ T7597] netlink: 'syz.2.513': attribute type 21 has an invalid length. [ 196.599844][ T7580] netlink: 'syz.1.507': attribute type 29 has an invalid length. [ 196.644647][ T7585] __nla_validate_parse: 6 callbacks suppressed [ 196.644672][ T7585] netlink: 152 bytes leftover after parsing attributes in process `syz.1.507'. [ 196.765892][ T7597] netlink: 132 bytes leftover after parsing attributes in process `syz.2.513'. [ 196.969019][ T7606] syz1: rxe_newlink: already configured on lo [ 197.326196][ T7610] lo speed is unknown, defaulting to 1000 [ 198.264962][ T7623] netlink: 104 bytes leftover after parsing attributes in process `syz.2.522'. [ 198.479991][ T7627] netlink: 12 bytes leftover after parsing attributes in process `syz.0.521'. [ 198.788732][ T7616] lo speed is unknown, defaulting to 1000 [ 199.556222][ T7644] netlink: 12 bytes leftover after parsing attributes in process `syz.2.526'. [ 199.790315][ T7651] rdma_rxe: rxe_newlink: failed to add lo [ 200.021623][ T7655] netlink: 'syz.4.532': attribute type 10 has an invalid length. [ 200.354686][ T7660] netlink: 209852 bytes leftover after parsing attributes in process `syz.2.534'. [ 202.858412][ T7698] netlink: 'syz.4.541': attribute type 21 has an invalid length. [ 202.933973][ T7698] netlink: 156 bytes leftover after parsing attributes in process `syz.4.541'. [ 203.183315][ T7709] netlink: 209852 bytes leftover after parsing attributes in process `syz.2.545'. [ 204.140553][ T7725] netlink: 16 bytes leftover after parsing attributes in process `syz.4.552'. [ 205.169543][ T7746] netlink: 209852 bytes leftover after parsing attributes in process `syz.1.558'. [ 207.355144][ T7771] pim6reg1: entered allmulticast mode [ 209.921209][ T7818] netlink: 16 bytes leftover after parsing attributes in process `syz.3.581'. [ 210.768743][ T7835] FAULT_INJECTION: forcing a failure. [ 210.768743][ T7835] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 210.833364][ T7835] CPU: 1 UID: 0 PID: 7835 Comm: syz.0.587 Not tainted 6.17.0-rc1-syzkaller-gdc0fe956144d #0 PREEMPT(full) [ 210.833395][ T7835] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 210.833406][ T7835] Call Trace: [ 210.833414][ T7835] [ 210.833423][ T7835] dump_stack_lvl+0x189/0x250 [ 210.833452][ T7835] ? __pfx____ratelimit+0x10/0x10 [ 210.833480][ T7835] ? __pfx_dump_stack_lvl+0x10/0x10 [ 210.833502][ T7835] ? __pfx__printk+0x10/0x10 [ 210.833529][ T7835] ? __might_fault+0xb0/0x130 [ 210.833560][ T7835] ? __might_fault+0xb0/0x130 [ 210.833592][ T7835] should_fail_ex+0x414/0x560 [ 210.833624][ T7835] _copy_from_user+0x2d/0xb0 [ 210.833648][ T7835] __sys_bpf+0x1ed/0x870 [ 210.833678][ T7835] ? __pfx___sys_bpf+0x10/0x10 [ 210.833723][ T7835] ? __pfx_perf_trace_preemptirq_template+0x10/0x10 [ 210.833752][ T7835] ? __pfx_ksys_write+0x10/0x10 [ 210.833775][ T7835] ? rcu_is_watching+0x15/0xb0 [ 210.833804][ T7835] __x64_sys_bpf+0x7c/0x90 [ 210.833829][ T7835] do_syscall_64+0xfa/0x3b0 [ 210.833855][ T7835] ? lockdep_hardirqs_on+0x9c/0x150 [ 210.833881][ T7835] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 210.833901][ T7835] ? clear_bhb_loop+0x60/0xb0 [ 210.833926][ T7835] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 210.833945][ T7835] RIP: 0033:0x7fdad3b8ebe9 [ 210.833963][ T7835] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 210.833980][ T7835] RSP: 002b:00007fdad49de038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 210.834003][ T7835] RAX: ffffffffffffffda RBX: 00007fdad3db5fa0 RCX: 00007fdad3b8ebe9 [ 210.834017][ T7835] RDX: 0000000000000090 RSI: 00002000000004c0 RDI: 0000000000000005 [ 210.834035][ T7835] RBP: 00007fdad49de090 R08: 0000000000000000 R09: 0000000000000000 [ 210.834048][ T7835] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 210.834059][ T7835] R13: 00007fdad3db6038 R14: 00007fdad3db5fa0 R15: 00007ffe054d7bb8 [ 210.834102][ T7835] [ 211.265274][ T7847] netlink: 20 bytes leftover after parsing attributes in process `syz.1.590'. [ 211.313750][ T7848] netlink: 'syz.4.589': attribute type 11 has an invalid length. [ 211.321632][ T7848] netlink: 199836 bytes leftover after parsing attributes in process `syz.4.589'. [ 211.433653][ T7848] netlink: 'syz.4.589': attribute type 11 has an invalid length. [ 211.467804][ T7848] netlink: 199836 bytes leftover after parsing attributes in process `syz.4.589'. [ 211.517409][ T7836] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 211.789786][ T7854] netlink: 60 bytes leftover after parsing attributes in process `syz.3.593'. [ 211.824548][ T7863] netlink: 104 bytes leftover after parsing attributes in process `syz.1.596'. [ 211.839777][ T7854] Driver unsupported XDP return value 0 on prog (id 378) dev N/A, expect packet loss! [ 211.858438][ T5876] Bluetooth: hci4: command 0x0406 tx timeout [ 211.868333][ T5877] Bluetooth: hci1: command 0x0406 tx timeout [ 211.872871][ T5183] Bluetooth: hci2: command 0x0406 tx timeout [ 211.878778][ T5877] Bluetooth: hci3: command 0x0406 tx timeout [ 211.880892][ T5183] Bluetooth: hci0: command 0x0406 tx timeout [ 214.319731][ T7908] netlink: 104 bytes leftover after parsing attributes in process `syz.2.610'. [ 217.496620][ T7918] FAULT_INJECTION: forcing a failure. [ 217.496620][ T7918] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 217.560696][ T7918] CPU: 1 UID: 0 PID: 7918 Comm: syz.3.615 Not tainted 6.17.0-rc1-syzkaller-gdc0fe956144d #0 PREEMPT(full) [ 217.560726][ T7918] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 217.560737][ T7918] Call Trace: [ 217.560744][ T7918] [ 217.560753][ T7918] dump_stack_lvl+0x189/0x250 [ 217.560781][ T7918] ? __pfx____ratelimit+0x10/0x10 [ 217.560807][ T7918] ? __pfx_dump_stack_lvl+0x10/0x10 [ 217.560829][ T7918] ? __pfx__printk+0x10/0x10 [ 217.560855][ T7918] ? __might_fault+0xb0/0x130 [ 217.560893][ T7918] should_fail_ex+0x414/0x560 [ 217.560924][ T7918] _copy_from_user+0x2d/0xb0 [ 217.560946][ T7918] ___sys_sendmsg+0x158/0x2a0 [ 217.560969][ T7918] ? __pfx____sys_sendmsg+0x10/0x10 [ 217.561028][ T7918] ? __fget_files+0x2a/0x420 [ 217.561043][ T7918] ? __fget_files+0x3a0/0x420 [ 217.561071][ T7918] __x64_sys_sendmsg+0x19b/0x260 [ 217.561094][ T7918] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 217.561124][ T7918] ? __pfx_ksys_write+0x10/0x10 [ 217.561145][ T7918] ? rcu_is_watching+0x15/0xb0 [ 217.561170][ T7918] ? do_syscall_64+0xbe/0x3b0 [ 217.561201][ T7918] do_syscall_64+0xfa/0x3b0 [ 217.561225][ T7918] ? lockdep_hardirqs_on+0x9c/0x150 [ 217.561248][ T7918] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 217.561267][ T7918] ? clear_bhb_loop+0x60/0xb0 [ 217.561289][ T7918] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 217.561307][ T7918] RIP: 0033:0x7f5d5cf8ebe9 [ 217.561324][ T7918] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 217.561340][ T7918] RSP: 002b:00007f5d5deb2038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 217.561361][ T7918] RAX: ffffffffffffffda RBX: 00007f5d5d1b5fa0 RCX: 00007f5d5cf8ebe9 [ 217.561384][ T7918] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 0000000000000005 [ 217.561396][ T7918] RBP: 00007f5d5deb2090 R08: 0000000000000000 R09: 0000000000000000 [ 217.561407][ T7918] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 217.561418][ T7918] R13: 00007f5d5d1b6038 R14: 00007f5d5d1b5fa0 R15: 00007fff4df80948 [ 217.561450][ T7918] [ 217.743799][ T7926] netlink: 'syz.2.613': attribute type 1 has an invalid length. [ 217.823455][ T7930] netlink: 'syz.2.613': attribute type 4 has an invalid length. [ 217.869077][ T7928] netlink: 180 bytes leftover after parsing attributes in process `syz.1.616'. [ 217.871762][ T7926] netlink: 'syz.2.613': attribute type 3 has an invalid length. [ 218.100570][ T7926] netlink: 132 bytes leftover after parsing attributes in process `syz.2.613'. [ 218.523069][ T7945] netlink: 104 bytes leftover after parsing attributes in process `syz.1.621'. [ 218.993198][ T7953] netlink: 8 bytes leftover after parsing attributes in process `syz.1.623'. [ 219.311580][ T7961] bridge0: port 3(veth1_to_team) entered disabled state [ 219.318932][ T7961] bridge0: port 2(bridge_slave_1) entered disabled state [ 219.327172][ T7961] bridge0: port 1(bridge_slave_0) entered disabled state [ 219.556185][ T7961] veth1_to_team: left allmulticast mode [ 219.564691][ T7964] openvswitch: netlink: Message has 4 unknown bytes. [ 219.573393][ T7961] veth1_to_team: left promiscuous mode [ 219.594254][ T7961] bridge0: port 3(veth1_to_team) entered disabled state [ 219.635905][ T7961] bridge_slave_1: left allmulticast mode [ 219.658965][ T7961] bridge_slave_1: left promiscuous mode [ 219.700093][ T7961] bridge0: port 2(bridge_slave_1) entered disabled state [ 219.727313][ T7961] bridge_slave_0: left allmulticast mode [ 219.767468][ T7961] bridge_slave_0: left promiscuous mode [ 219.777371][ T7961] bridge0: port 1(bridge_slave_0) entered disabled state [ 220.560619][ T7975] delete_channel: no stack [ 220.793515][ T7990] netlink: 20 bytes leftover after parsing attributes in process `syz.3.635'. [ 220.853694][ T7992] netlink: 20 bytes leftover after parsing attributes in process `syz.4.636'. [ 222.229965][ T8029] netlink: 'syz.0.646': attribute type 33 has an invalid length. [ 222.238607][ T8029] netlink: 152 bytes leftover after parsing attributes in process `syz.0.646'. [ 222.525607][ T8026] netlink: 147608 bytes leftover after parsing attributes in process `syz.4.645'. [ 222.571641][ T8026] netlink: 62239 bytes leftover after parsing attributes in process `syz.4.645'. [ 222.784728][ T8038] netlink: 20 bytes leftover after parsing attributes in process `syz.2.649'. [ 222.899396][ T8037] netlink: 8 bytes leftover after parsing attributes in process `syz.0.650'. [ 222.951948][ T8044] netlink: 'syz.2.652': attribute type 1 has an invalid length. [ 223.355113][ T8052] netlink: 212376 bytes leftover after parsing attributes in process `syz.2.654'. [ 223.430782][ T8049] netlink: 'syz.3.655': attribute type 39 has an invalid length. [ 223.744345][ T8063] netlink: 8 bytes leftover after parsing attributes in process `syz.4.659'. [ 223.754401][ T8063] netlink: 8 bytes leftover after parsing attributes in process `syz.4.659'. [ 224.198446][ T8073] netlink: 12 bytes leftover after parsing attributes in process `syz.1.660'. [ 224.372249][ T8077] netlink: 147608 bytes leftover after parsing attributes in process `syz.4.663'. [ 224.614628][ T8077] netlink: 62239 bytes leftover after parsing attributes in process `syz.4.663'. [ 224.750161][ T8075] syzkaller0: entered promiscuous mode [ 224.789459][ T8078] netlink: 'syz.2.662': attribute type 21 has an invalid length. [ 224.821183][ T8075] syzkaller0: entered allmulticast mode [ 224.829546][ T8078] netlink: 128 bytes leftover after parsing attributes in process `syz.2.662'. [ 224.871133][ T8078] netlink: 3 bytes leftover after parsing attributes in process `syz.2.662'. [ 225.702762][ T8091] netlink: 'syz.1.666': attribute type 2 has an invalid length. [ 225.705876][ T8095] netlink: 'syz.1.666': attribute type 2 has an invalid length. [ 225.710824][ T8091] netlink: 132 bytes leftover after parsing attributes in process `syz.1.666'. [ 227.303939][ T8090] netlink: 'syz.1.666': attribute type 1 has an invalid length. [ 228.021907][ T5233] udevd[5233]: worker [7920] terminated by signal 33 (Unknown signal 33) [ 228.065881][ T8119] __nla_validate_parse: 2 callbacks suppressed [ 228.065904][ T8119] netlink: 147608 bytes leftover after parsing attributes in process `syz.1.677'. [ 228.092453][ T5233] udevd[5233]: worker [7920] failed while handling '/devices/virtual/block/loop0' [ 228.370546][ T8119] netlink: 62239 bytes leftover after parsing attributes in process `syz.1.677'. [ 228.481080][ T8124] netlink: 12 bytes leftover after parsing attributes in process `syz.4.676'. [ 229.935921][ T8140] netlink: 22 bytes leftover after parsing attributes in process `syz.0.683'. [ 230.218034][ T8154] netlink: 104 bytes leftover after parsing attributes in process `syz.1.685'. [ 230.423367][ T8153] netlink: 20 bytes leftover after parsing attributes in process `syz.4.686'. [ 231.946905][ T8169] FAULT_INJECTION: forcing a failure. [ 231.946905][ T8169] name failslab, interval 1, probability 0, space 0, times 0 [ 232.032651][ T8169] CPU: 0 UID: 0 PID: 8169 Comm: syz.1.691 Not tainted 6.17.0-rc1-syzkaller-gdc0fe956144d #0 PREEMPT(full) [ 232.032680][ T8169] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 232.032692][ T8169] Call Trace: [ 232.032701][ T8169] [ 232.032712][ T8169] dump_stack_lvl+0x189/0x250 [ 232.032746][ T8169] ? __pfx____ratelimit+0x10/0x10 [ 232.032778][ T8169] ? __pfx_dump_stack_lvl+0x10/0x10 [ 232.032806][ T8169] ? __pfx__printk+0x10/0x10 [ 232.032860][ T8169] ? ref_tracker_alloc+0x318/0x460 [ 232.032904][ T8169] should_fail_ex+0x414/0x560 [ 232.032950][ T8169] should_failslab+0xa8/0x100 [ 232.032987][ T8169] kmem_cache_alloc_noprof+0x73/0x3c0 [ 232.033014][ T8169] ? skb_clone+0x212/0x3a0 [ 232.033054][ T8169] skb_clone+0x212/0x3a0 [ 232.033091][ T8169] __netlink_deliver_tap+0x404/0x850 [ 232.033180][ T8169] ? netlink_deliver_tap+0x2e/0x1b0 [ 232.033217][ T8169] netlink_deliver_tap+0x19c/0x1b0 [ 232.033252][ T8169] __netlink_sendskb+0x47/0x90 [ 232.033286][ T8169] netlink_dump+0xa84/0xe90 [ 232.033357][ T8169] ? __pfx_netlink_dump+0x10/0x10 [ 232.033380][ T8169] ? ip_set_dump_start+0x2ec/0x410 [ 232.033459][ T8169] ? netlink_lookup+0x30/0x200 [ 232.033487][ T8169] ? netlink_lookup+0x30/0x200 [ 232.033508][ T8169] ? netlink_lookup+0x30/0x200 [ 232.033556][ T8169] __netlink_dump_start+0x5cb/0x7e0 [ 232.033622][ T8169] ip_set_dump+0x13e/0x1c0 [ 232.033649][ T8169] ? __pfx_ip_set_dump+0x10/0x10 [ 232.033671][ T8169] ? __pfx_ip_set_dump_start+0x10/0x10 [ 232.033692][ T8169] ? __pfx_ip_set_dump_do+0x10/0x10 [ 232.033712][ T8169] ? __pfx_ip_set_dump_done+0x10/0x10 [ 232.033785][ T8169] nfnetlink_rcv_msg+0xb4d/0x1130 [ 232.033816][ T8169] ? nfnetlink_rcv_msg+0x20d/0x1130 [ 232.033906][ T8169] ? __pfx_nfnetlink_rcv_msg+0x10/0x10 [ 232.033927][ T8169] ? kasan_save_free_info+0x46/0x50 [ 232.034109][ T8169] netlink_rcv_skb+0x208/0x470 [ 232.034145][ T8169] ? __pfx_nfnetlink_rcv_msg+0x10/0x10 [ 232.034179][ T8169] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 232.034249][ T8169] ? bpf_lsm_capable+0x9/0x20 [ 232.034274][ T8169] ? security_capable+0x7e/0x2e0 [ 232.034331][ T8169] nfnetlink_rcv+0x26a/0x2520 [ 232.034370][ T8169] ? __dev_queue_xmit+0x1d79/0x3b50 [ 232.034430][ T8169] ? __dev_queue_xmit+0x27b/0x3b50 [ 232.034496][ T8169] ? __pfx_nfnetlink_rcv+0x10/0x10 [ 232.034525][ T8169] ? __pfx___dev_queue_xmit+0x10/0x10 [ 232.034604][ T8169] ? ref_tracker_free+0x63a/0x7d0 [ 232.034635][ T8169] ? __asan_memcpy+0x40/0x70 [ 232.034659][ T8169] ? __pfx_ref_tracker_free+0x10/0x10 [ 232.034682][ T8169] ? __skb_clone+0x63/0x7a0 [ 232.034722][ T8169] ? __skb_clone+0x483/0x7a0 [ 232.034770][ T8169] ? skb_clone+0x246/0x3a0 [ 232.034805][ T8169] ? __netlink_deliver_tap+0x807/0x850 [ 232.034835][ T8169] ? netlink_deliver_tap+0x2e/0x1b0 [ 232.034887][ T8169] ? netlink_deliver_tap+0x2e/0x1b0 [ 232.034944][ T8169] netlink_unicast+0x82c/0x9e0 [ 232.035004][ T8169] ? __pfx_netlink_unicast+0x10/0x10 [ 232.035040][ T8169] ? netlink_sendmsg+0x642/0xb30 [ 232.035064][ T8169] ? skb_put+0x11b/0x210 [ 232.035100][ T8169] netlink_sendmsg+0x805/0xb30 [ 232.035160][ T8169] ? __pfx_netlink_sendmsg+0x10/0x10 [ 232.035203][ T8169] ? aa_sock_msg_perm+0xf1/0x1d0 [ 232.035243][ T8169] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 232.035265][ T8169] ? __pfx_netlink_sendmsg+0x10/0x10 [ 232.035299][ T8169] __sock_sendmsg+0x21c/0x270 [ 232.035340][ T8169] ____sys_sendmsg+0x505/0x830 [ 232.035386][ T8169] ? __pfx_____sys_sendmsg+0x10/0x10 [ 232.035441][ T8169] ? import_iovec+0x74/0xa0 [ 232.035481][ T8169] ___sys_sendmsg+0x21f/0x2a0 [ 232.035515][ T8169] ? __pfx____sys_sendmsg+0x10/0x10 [ 232.035668][ T8169] ? __fget_files+0x2a/0x420 [ 232.035686][ T8169] ? __fget_files+0x3a0/0x420 [ 232.035743][ T8169] __x64_sys_sendmsg+0x19b/0x260 [ 232.035777][ T8169] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 232.035833][ T8169] ? __pfx_ksys_write+0x10/0x10 [ 232.035855][ T8169] ? rcu_is_watching+0x15/0xb0 [ 232.035895][ T8169] ? do_syscall_64+0xbe/0x3b0 [ 232.035938][ T8169] do_syscall_64+0xfa/0x3b0 [ 232.035964][ T8169] ? lockdep_hardirqs_on+0x9c/0x150 [ 232.035992][ T8169] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 232.036013][ T8169] ? clear_bhb_loop+0x60/0xb0 [ 232.036046][ T8169] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 232.036065][ T8169] RIP: 0033:0x7f98ab58ebe9 [ 232.036087][ T8169] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 232.036103][ T8169] RSP: 002b:00007f98ac443038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 232.036125][ T8169] RAX: ffffffffffffffda RBX: 00007f98ab7b5fa0 RCX: 00007f98ab58ebe9 [ 232.036138][ T8169] RDX: 0000000000040014 RSI: 0000200000004740 RDI: 0000000000000006 [ 232.036150][ T8169] RBP: 00007f98ac443090 R08: 0000000000000000 R09: 0000000000000000 [ 232.036161][ T8169] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 232.036173][ T8169] R13: 00007f98ab7b6038 R14: 00007f98ab7b5fa0 R15: 00007ffc5bae7198 [ 232.036241][ T8169] [ 232.723470][ T8178] netlink: 12 bytes leftover after parsing attributes in process `syz.2.692'. [ 232.922693][ T8174] netlink: 147608 bytes leftover after parsing attributes in process `syz.0.690'. [ 232.993504][ T8174] netlink: 62239 bytes leftover after parsing attributes in process `syz.0.690'. [ 233.010433][ T30] audit: type=1107 audit(1755276031.636:3): pid=8185 uid=0 auid=4294967295 ses=4294967295 subj=unconfined msg='' [ 233.368729][ T8189] netlink: 10 bytes leftover after parsing attributes in process `syz.2.696'. [ 233.864365][ T8203] netlink: 104 bytes leftover after parsing attributes in process `syz.0.701'. [ 234.158719][ T8211] netlink: 20 bytes leftover after parsing attributes in process `syz.2.703'. [ 234.698790][ T8223] syzkaller0: entered promiscuous mode [ 234.711729][ T8223] syzkaller0: entered allmulticast mode [ 234.825386][ T8228] netlink: 'syz.2.709': attribute type 4 has an invalid length. [ 234.869052][ T8220] netlink: 12 bytes leftover after parsing attributes in process `syz.1.706'. [ 234.948892][ T8232] netlink: 147608 bytes leftover after parsing attributes in process `syz.4.710'. [ 234.979200][ T8232] netlink: 62239 bytes leftover after parsing attributes in process `syz.4.710'. [ 236.317675][ T8252] netlink: 24 bytes leftover after parsing attributes in process `syz.4.717'. [ 237.757777][ T8279] netlink: 'syz.4.725': attribute type 39 has an invalid length. [ 238.933307][ T8288] netlink: 212408 bytes leftover after parsing attributes in process `syz.3.729'. [ 238.977026][ T8288] netlink: zone id is out of range [ 239.006645][ T8288] netlink: get zone limit has 8 unknown bytes [ 239.091644][ T8295] netlink: 36 bytes leftover after parsing attributes in process `syz.2.730'. [ 239.145762][ T8296] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 239.180132][ T8296] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 239.467153][ T8296] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 239.506341][ T8296] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 240.917965][ T8328] netlink: 'syz.3.740': attribute type 1 has an invalid length. [ 240.941037][ T8329] €Â: renamed from hsr0 (while UP) [ 240.966059][ T8328] netlink: 16227 bytes leftover after parsing attributes in process `syz.3.740'. [ 242.411409][ T5869] Bluetooth: hci1: unexpected event 0x30 length: 151 > 3 [ 242.486621][ T8361] netlink: 'syz.1.749': attribute type 7 has an invalid length. [ 242.507168][ T8361] netlink: 'syz.1.749': attribute type 6 has an invalid length. [ 245.686214][ T8418] netlink: 'syz.0.766': attribute type 12 has an invalid length. [ 245.723298][ T8418] netlink: 132 bytes leftover after parsing attributes in process `syz.0.766'. [ 246.028208][ T8428] syzkaller0: entered promiscuous mode [ 246.047276][ T8428] syzkaller0: entered allmulticast mode [ 246.116294][ T8435] netlink: 199836 bytes leftover after parsing attributes in process `syz.3.772'. [ 246.239038][ T8429] netlink: 44 bytes leftover after parsing attributes in process `syz.1.767'. [ 246.282541][ T8429] netlink: 8 bytes leftover after parsing attributes in process `syz.1.767'. [ 246.863755][ T8455] netlink: 20 bytes leftover after parsing attributes in process `syz.4.777'. [ 247.157049][ T8459] netlink: 'syz.1.781': attribute type 6 has an invalid length. [ 247.165265][ T8459] netlink: 'syz.1.781': attribute type 3 has an invalid length. [ 247.177988][ T8459] netlink: 153952 bytes leftover after parsing attributes in process `syz.1.781'. [ 247.356420][ T8468] netlink: 'syz.3.780': attribute type 2 has an invalid length. [ 247.365195][ T8468] netlink: 'syz.3.780': attribute type 8 has an invalid length. [ 247.376839][ T8468] netlink: 132 bytes leftover after parsing attributes in process `syz.3.780'. [ 247.851678][ T8481] netlink: 104 bytes leftover after parsing attributes in process `syz.1.786'. [ 247.872829][ T8482] netlink: 8 bytes leftover after parsing attributes in process `syz.2.784'. [ 248.575168][ T8494] netlink: 48 bytes leftover after parsing attributes in process `syz.4.789'. [ 249.837040][ T8530] netlink: 'syz.4.800': attribute type 10 has an invalid length. [ 250.003999][ T8530] bond0: (slave dummy0): Enslaving as an active interface with an up link [ 251.023553][ T8541] netlink: 'syz.4.805': attribute type 10 has an invalid length. [ 251.138473][ T8541] 8021q: adding VLAN 0 to HW filter on device team0 [ 252.181099][ T8563] netlink: 'syz.4.812': attribute type 2 has an invalid length. [ 252.231729][ T8563] __nla_validate_parse: 3 callbacks suppressed [ 252.231751][ T8563] netlink: 116 bytes leftover after parsing attributes in process `syz.4.812'. [ 253.938512][ T8603] syz.2.823 uses obsolete (PF_INET,SOCK_PACKET) [ 254.485907][ T8615] netlink: 20 bytes leftover after parsing attributes in process `syz.4.827'. [ 254.987796][ T8627] netlink: 20 bytes leftover after parsing attributes in process `syz.4.829'. [ 255.224919][ T8633] netlink: 'syz.3.830': attribute type 2 has an invalid length. [ 255.251649][ T8633] netlink: 126524 bytes leftover after parsing attributes in process `syz.3.830'. [ 256.058075][ T1307] ieee802154 phy0 wpan0: encryption failed: -22 [ 256.068578][ T1307] ieee802154 phy1 wpan1: encryption failed: -22 [ 257.081265][ T8638] netlink: 147608 bytes leftover after parsing attributes in process `syz.1.834'. [ 257.219669][ T8638] netlink: 62239 bytes leftover after parsing attributes in process `syz.1.834'. [ 257.495714][ T8636] lo speed is unknown, defaulting to 1000 [ 258.338267][ T8651] netlink: 'syz.2.836': attribute type 39 has an invalid length. [ 258.485916][ T8657] FAULT_INJECTION: forcing a failure. [ 258.485916][ T8657] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 258.521128][ T8657] CPU: 0 UID: 0 PID: 8657 Comm: syz.3.839 Not tainted 6.17.0-rc1-syzkaller-gdc0fe956144d #0 PREEMPT(full) [ 258.521158][ T8657] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 258.521170][ T8657] Call Trace: [ 258.521178][ T8657] [ 258.521187][ T8657] dump_stack_lvl+0x189/0x250 [ 258.521217][ T8657] ? __pfx____ratelimit+0x10/0x10 [ 258.521245][ T8657] ? __pfx_dump_stack_lvl+0x10/0x10 [ 258.521269][ T8657] ? __pfx__printk+0x10/0x10 [ 258.521297][ T8657] ? __might_fault+0xb0/0x130 [ 258.521341][ T8657] should_fail_ex+0x414/0x560 [ 258.521375][ T8657] _copy_from_user+0x2d/0xb0 [ 258.521405][ T8657] ___sys_sendmsg+0x158/0x2a0 [ 258.521431][ T8657] ? __pfx____sys_sendmsg+0x10/0x10 [ 258.521505][ T8657] ? __fget_files+0x2a/0x420 [ 258.521522][ T8657] ? __fget_files+0x3a0/0x420 [ 258.521555][ T8657] __x64_sys_sendmsg+0x19b/0x260 [ 258.521580][ T8657] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 258.521615][ T8657] ? __pfx_ksys_write+0x10/0x10 [ 258.521638][ T8657] ? rcu_is_watching+0x15/0xb0 [ 258.521666][ T8657] ? do_syscall_64+0xbe/0x3b0 [ 258.521698][ T8657] do_syscall_64+0xfa/0x3b0 [ 258.521722][ T8657] ? lockdep_hardirqs_on+0x9c/0x150 [ 258.521747][ T8657] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 258.521767][ T8657] ? clear_bhb_loop+0x60/0xb0 [ 258.521792][ T8657] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 258.521810][ T8657] RIP: 0033:0x7f5d5cf8ebe9 [ 258.521829][ T8657] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 258.521846][ T8657] RSP: 002b:00007f5d5deb2038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 258.521867][ T8657] RAX: ffffffffffffffda RBX: 00007f5d5d1b5fa0 RCX: 00007f5d5cf8ebe9 [ 258.521881][ T8657] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 0000000000000006 [ 258.521894][ T8657] RBP: 00007f5d5deb2090 R08: 0000000000000000 R09: 0000000000000000 [ 258.521906][ T8657] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 258.521917][ T8657] R13: 00007f5d5d1b6038 R14: 00007f5d5d1b5fa0 R15: 00007fff4df80948 [ 258.521957][ T8657] [ 258.959564][ T8661] netlink: 'syz.4.841': attribute type 39 has an invalid length. [ 259.017656][ T8663] netlink: 12 bytes leftover after parsing attributes in process `syz.1.842'. [ 259.741803][ T8684] netlink: 12 bytes leftover after parsing attributes in process `syz.2.848'. [ 259.752783][ T8684] netlink: 104 bytes leftover after parsing attributes in process `syz.2.848'. [ 260.074410][ T8687] netlink: 24032 bytes leftover after parsing attributes in process `syz.2.850'. [ 260.121672][ T8687] netlink: 104088 bytes leftover after parsing attributes in process `syz.2.850'. [ 260.151414][ T8687] netlink: 24032 bytes leftover after parsing attributes in process `syz.2.850'. [ 260.269875][ T8694] netlink: 'syz.2.853': attribute type 1 has an invalid length. [ 260.278105][ T8694] netlink: 212408 bytes leftover after parsing attributes in process `syz.2.853'. [ 260.467987][ T8697] netlink: 'syz.2.854': attribute type 25 has an invalid length. [ 260.517772][ T8697] netlink: 'syz.2.854': attribute type 1 has an invalid length. [ 260.545064][ T8697] bridge0: port 1(bridge_slave_0) entered learning state [ 262.993069][ T8712] netlink: 104 bytes leftover after parsing attributes in process `syz.3.859'. [ 263.093125][ T8716] netlink: 12 bytes leftover after parsing attributes in process `syz.4.860'. [ 263.121537][ T8716] netlink: 104 bytes leftover after parsing attributes in process `syz.4.860'. [ 263.485684][ T8730] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 263.947043][ T8738] netlink: 'syz.4.868': attribute type 6 has an invalid length. [ 264.478113][ T8744] __nla_validate_parse: 2 callbacks suppressed [ 264.478160][ T8744] netlink: 20 bytes leftover after parsing attributes in process `syz.0.871'. [ 264.756606][ T8755] netlink: 12 bytes leftover after parsing attributes in process `syz.1.874'. [ 264.790520][ T8755] netlink: 104 bytes leftover after parsing attributes in process `syz.1.874'. [ 265.255277][ T8759] netlink: 12 bytes leftover after parsing attributes in process `syz.1.877'. [ 265.309644][ T8766] netlink: 20 bytes leftover after parsing attributes in process `syz.0.878'. [ 265.552931][ T8774] raw_sendmsg: syz.1.882 forgot to set AF_INET. Fix it! [ 265.867065][ T8781] netlink: 9286 bytes leftover after parsing attributes in process `syz.1.884'. [ 266.589199][ T8794] netlink: 'syz.4.888': attribute type 39 has an invalid length. [ 266.990592][ T8805] netlink: 20 bytes leftover after parsing attributes in process `syz.0.891'. [ 267.200575][ T8812] netlink: 20 bytes leftover after parsing attributes in process `syz.4.894'. [ 267.213797][ T8813] netlink: 'syz.3.892': attribute type 39 has an invalid length. [ 268.120395][ T8837] FAULT_INJECTION: forcing a failure. [ 268.120395][ T8837] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 268.140399][ T8837] CPU: 0 UID: 0 PID: 8837 Comm: syz.0.901 Not tainted 6.17.0-rc1-syzkaller-gdc0fe956144d #0 PREEMPT(full) [ 268.140425][ T8837] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 268.140435][ T8837] Call Trace: [ 268.140441][ T8837] [ 268.140449][ T8837] dump_stack_lvl+0x189/0x250 [ 268.140476][ T8837] ? __pfx____ratelimit+0x10/0x10 [ 268.140500][ T8837] ? __pfx_dump_stack_lvl+0x10/0x10 [ 268.140519][ T8837] ? __pfx__printk+0x10/0x10 [ 268.140543][ T8837] ? __might_fault+0xb0/0x130 [ 268.140578][ T8837] should_fail_ex+0x414/0x560 [ 268.140606][ T8837] _copy_from_iter+0x1db/0x16f0 [ 268.140625][ T8837] ? rep_movs_alternative+0x4a/0x90 [ 268.140652][ T8837] ? __pfx__copy_from_iter+0x10/0x10 [ 268.140665][ T8837] ? sock_alloc_send_pskb+0x875/0x990 [ 268.140691][ T8837] ? __pfx__copy_from_iter+0x10/0x10 [ 268.140710][ T8837] ? page_copy_sane+0x16a/0x280 [ 268.140728][ T8837] copy_page_from_iter+0xdd/0x170 [ 268.140749][ T8837] skb_copy_datagram_from_iter+0x306/0x720 [ 268.140782][ T8837] tun_get_user+0x1691/0x3e20 [ 268.140819][ T8837] ? aa_file_perm+0x44d/0x1550 [ 268.140836][ T8837] ? __pfx_tun_get_user+0x10/0x10 [ 268.140851][ T8837] ? _parse_integer_limit+0x1ae/0x1f0 [ 268.140886][ T8837] ? __lock_acquire+0xab9/0xd20 [ 268.140917][ T8837] ? ref_tracker_alloc+0x318/0x460 [ 268.140938][ T8837] ? __lock_acquire+0xab9/0xd20 [ 268.140965][ T8837] ? __pfx_ref_tracker_alloc+0x10/0x10 [ 268.140995][ T8837] ? tun_get+0x1c/0x2f0 [ 268.141017][ T8837] ? tun_get+0x1c/0x2f0 [ 268.141033][ T8837] ? tun_get+0x1c/0x2f0 [ 268.141054][ T8837] tun_chr_write_iter+0x113/0x200 [ 268.141083][ T8837] vfs_write+0x5c9/0xb30 [ 268.141113][ T8837] ? __pfx_tun_chr_write_iter+0x10/0x10 [ 268.141142][ T8837] ? __pfx_vfs_write+0x10/0x10 [ 268.141179][ T8837] ? __fget_files+0x2a/0x420 [ 268.141206][ T8837] ksys_write+0x145/0x250 [ 268.141234][ T8837] ? __pfx_ksys_write+0x10/0x10 [ 268.141256][ T8837] ? rcu_is_watching+0x15/0xb0 [ 268.141281][ T8837] ? do_syscall_64+0xbe/0x3b0 [ 268.141313][ T8837] do_syscall_64+0xfa/0x3b0 [ 268.141346][ T8837] ? lockdep_hardirqs_on+0x9c/0x150 [ 268.141371][ T8837] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 268.141390][ T8837] ? clear_bhb_loop+0x60/0xb0 [ 268.141413][ T8837] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 268.141431][ T8837] RIP: 0033:0x7fdad3b8ebe9 [ 268.141448][ T8837] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 268.141463][ T8837] RSP: 002b:00007fdad49de038 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 268.141484][ T8837] RAX: ffffffffffffffda RBX: 00007fdad3db5fa0 RCX: 00007fdad3b8ebe9 [ 268.141497][ T8837] RDX: 000000000000fdef RSI: 0000200000000840 RDI: 00000000000000c8 [ 268.141510][ T8837] RBP: 00007fdad49de090 R08: 0000000000000000 R09: 0000000000000000 [ 268.141522][ T8837] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 268.141533][ T8837] R13: 00007fdad3db6038 R14: 00007fdad3db5fa0 R15: 00007ffe054d7bb8 [ 268.141566][ T8837] [ 268.529154][ T8842] netlink: 20 bytes leftover after parsing attributes in process `syz.2.903'. [ 268.816311][ T8849] netlink: 12 bytes leftover after parsing attributes in process `syz.4.906'. [ 269.595468][ T8856] netlink: 8 bytes leftover after parsing attributes in process `syz.1.904'. [ 271.336151][ T8877] nft_compat: unsupported protocol 0 [ 271.410212][ T8855] syz.2.907 (8855) used greatest stack depth: 15128 bytes left [ 271.520878][ T8885] netlink: 211 bytes leftover after parsing attributes in process `syz.2.915'. [ 272.063094][ T8899] netlink: 20 bytes leftover after parsing attributes in process `syz.2.917'. [ 272.268157][ T8904] netlink: 'syz.1.919': attribute type 1 has an invalid length. [ 274.265544][ T8933] netlink: 'syz.1.924': attribute type 10 has an invalid length. [ 274.355797][ T8936] netlink: 'syz.4.925': attribute type 10 has an invalid length. [ 274.363699][ T8936] netlink: 55 bytes leftover after parsing attributes in process `syz.4.925'. [ 274.502687][ T8933] veth1_macvtap (unregistering): left allmulticast mode [ 274.582428][ T8933] bridge0: port 3(macsec0) entered disabled state [ 274.609406][ T8933] macsec0 (unregistering): left allmulticast mode [ 274.630800][ T8939] netlink: 'syz.0.926': attribute type 11 has an invalid length. [ 274.641982][ T8933] macsec0 (unregistering): left promiscuous mode [ 274.642533][ T8939] netlink: 199836 bytes leftover after parsing attributes in process `syz.0.926'. [ 274.651990][ T8933] bridge0: port 3(macsec0) entered disabled state [ 274.738368][ T8939] netlink: 'syz.0.926': attribute type 10 has an invalid length. [ 275.351713][ T8938] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 277.744645][ T8939] bond0: (slave wlan1): Enslaving as an active interface with an up link [ 277.888126][ T8951] FAULT_INJECTION: forcing a failure. [ 277.888126][ T8951] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 277.972581][ T8951] CPU: 0 UID: 0 PID: 8951 Comm: syz.3.929 Not tainted 6.17.0-rc1-syzkaller-gdc0fe956144d #0 PREEMPT(full) [ 277.972611][ T8951] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 277.972622][ T8951] Call Trace: [ 277.972634][ T8951] [ 277.972647][ T8951] dump_stack_lvl+0x189/0x250 [ 277.972685][ T8951] ? __pfx____ratelimit+0x10/0x10 [ 277.972723][ T8951] ? __pfx_dump_stack_lvl+0x10/0x10 [ 277.972757][ T8951] ? __pfx__printk+0x10/0x10 [ 277.972798][ T8951] ? __might_fault+0xb0/0x130 [ 277.972846][ T8951] ? __might_fault+0xb0/0x130 [ 277.972915][ T8951] should_fail_ex+0x414/0x560 [ 277.972981][ T8951] _copy_from_iter+0x1db/0x16f0 [ 277.973035][ T8951] ? rcu_is_watching+0x15/0xb0 [ 277.973072][ T8951] ? kmem_cache_alloc_node_noprof+0x217/0x3c0 [ 277.973115][ T8951] ? __pfx__copy_from_iter+0x10/0x10 [ 277.973159][ T8951] ? __build_skb_around+0x257/0x3e0 [ 277.973217][ T8951] ? netlink_sendmsg+0x642/0xb30 [ 277.973243][ T8951] ? skb_put+0x11b/0x210 [ 277.973305][ T8951] netlink_sendmsg+0x6b2/0xb30 [ 277.973396][ T8951] ? __pfx_netlink_sendmsg+0x10/0x10 [ 277.973443][ T8951] ? perf_trace_run_bpf_submit+0x100/0x170 [ 277.973467][ T8951] ? aa_sock_msg_perm+0xf1/0x1d0 [ 277.973516][ T8951] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 277.973541][ T8951] ? __pfx_netlink_sendmsg+0x10/0x10 [ 277.973590][ T8951] __sock_sendmsg+0x21c/0x270 [ 277.973646][ T8951] ____sys_sendmsg+0x505/0x830 [ 277.973708][ T8951] ? __pfx_____sys_sendmsg+0x10/0x10 [ 277.973788][ T8951] ? import_iovec+0x74/0xa0 [ 277.973845][ T8951] ___sys_sendmsg+0x21f/0x2a0 [ 277.973892][ T8951] ? __pfx____sys_sendmsg+0x10/0x10 [ 277.974039][ T8951] ? __fget_files+0x2a/0x420 [ 277.974136][ T8951] ? __fget_files+0x2a/0x420 [ 277.974157][ T8951] ? __fget_files+0x3a0/0x420 [ 277.974244][ T8951] __x64_sys_sendmsg+0x19b/0x260 [ 277.974300][ T8951] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 277.974388][ T8951] ? __pfx_ksys_write+0x10/0x10 [ 277.974411][ T8951] ? rcu_is_watching+0x15/0xb0 [ 277.974471][ T8951] ? do_syscall_64+0xbe/0x3b0 [ 277.974530][ T8951] do_syscall_64+0xfa/0x3b0 [ 277.974557][ T8951] ? lockdep_hardirqs_on+0x9c/0x150 [ 277.974591][ T8951] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 277.974614][ T8951] ? clear_bhb_loop+0x60/0xb0 [ 277.974661][ T8951] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 277.974683][ T8951] RIP: 0033:0x7f5d5cf8ebe9 [ 277.974709][ T8951] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 277.974726][ T8951] RSP: 002b:00007f5d5deb2038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 277.974748][ T8951] RAX: ffffffffffffffda RBX: 00007f5d5d1b5fa0 RCX: 00007f5d5cf8ebe9 [ 277.974763][ T8951] RDX: 0000000000000000 RSI: 0000200000000180 RDI: 0000000000000005 [ 277.974775][ T8951] RBP: 00007f5d5deb2090 R08: 0000000000000000 R09: 0000000000000000 [ 277.974787][ T8951] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 277.974799][ T8951] R13: 00007f5d5d1b6038 R14: 00007f5d5d1b5fa0 R15: 00007fff4df80948 [ 277.974910][ T8951] [ 278.001429][ T8956] netlink: 60 bytes leftover after parsing attributes in process `syz.2.930'. [ 278.337003][ T8960] netlink: 60 bytes leftover after parsing attributes in process `syz.2.930'. [ 278.346320][ T8963] netlink: 60 bytes leftover after parsing attributes in process `syz.2.930'. [ 278.651078][ T8967] netlink: 12 bytes leftover after parsing attributes in process `syz.1.934'. [ 278.704772][ T5869] Bluetooth: hci3: unexpected event 0x30 length: 151 > 3 [ 278.744381][ T5869] Bluetooth: hci1: unexpected event 0x30 length: 151 > 3 [ 279.328906][ T8991] netlink: 'syz.4.943': attribute type 10 has an invalid length. [ 279.445153][ T8991] netlink: 55 bytes leftover after parsing attributes in process `syz.4.943'. [ 279.713205][ T9000] rdma_rxe: rxe_newlink: failed to add lo [ 280.143919][ T9003] netlink: 60 bytes leftover after parsing attributes in process `syz.4.946'. [ 280.158964][ T9003] netlink: 60 bytes leftover after parsing attributes in process `syz.4.946'. [ 280.184600][ T9003] netlink: 60 bytes leftover after parsing attributes in process `syz.4.946'. [ 280.650774][ T5869] Bluetooth: hci1: unexpected event 0x30 length: 151 > 3 [ 280.769074][ T9018] netlink: 12 bytes leftover after parsing attributes in process `syz.3.950'. [ 281.151443][ T9022] netlink: 68 bytes leftover after parsing attributes in process `syz.4.952'. [ 281.333064][ T9032] netlink: 14568 bytes leftover after parsing attributes in process `syz.0.954'. [ 282.418592][ T5869] Bluetooth: hci0: unexpected event 0x30 length: 151 > 3 [ 283.566486][ T9070] netlink: 12 bytes leftover after parsing attributes in process `syz.3.968'. [ 283.709643][ T9078] netlink: 'syz.2.970': attribute type 21 has an invalid length. [ 283.831943][ T9077] netlink: 'syz.0.971': attribute type 39 has an invalid length. [ 283.861689][ T9081] netlink: 104 bytes leftover after parsing attributes in process `syz.4.972'. [ 283.984227][ T9075] syzkaller0: default qdisc (pfifo_fast) fail, fallback to noqueue [ 284.035407][ T9078] netlink: 32 bytes leftover after parsing attributes in process `syz.2.970'. [ 284.294593][ T9086] netlink: 20 bytes leftover after parsing attributes in process `syz.0.974'. [ 286.111119][ T9114] FAULT_INJECTION: forcing a failure. [ 286.111119][ T9114] name failslab, interval 1, probability 0, space 0, times 0 [ 286.128812][ T9114] CPU: 0 UID: 0 PID: 9114 Comm: syz.4.983 Not tainted 6.17.0-rc1-syzkaller-gdc0fe956144d #0 PREEMPT(full) [ 286.128841][ T9114] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 286.128853][ T9114] Call Trace: [ 286.128863][ T9114] [ 286.128873][ T9114] dump_stack_lvl+0x189/0x250 [ 286.128906][ T9114] ? __pfx____ratelimit+0x10/0x10 [ 286.128937][ T9114] ? __pfx_dump_stack_lvl+0x10/0x10 [ 286.128965][ T9114] ? __pfx__printk+0x10/0x10 [ 286.129017][ T9114] ? __pfx___might_resched+0x10/0x10 [ 286.129056][ T9114] should_fail_ex+0x414/0x560 [ 286.129102][ T9114] should_failslab+0xa8/0x100 [ 286.129141][ T9114] kmem_cache_alloc_node_noprof+0x76/0x3c0 [ 286.129173][ T9114] ? __alloc_skb+0x112/0x2d0 [ 286.129221][ T9114] __alloc_skb+0x112/0x2d0 [ 286.129269][ T9114] netlink_sendmsg+0x5c6/0xb30 [ 286.129333][ T9114] ? __pfx_netlink_sendmsg+0x10/0x10 [ 286.129387][ T9114] ? aa_sock_msg_perm+0xf1/0x1d0 [ 286.129429][ T9114] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 286.129453][ T9114] ? __pfx_netlink_sendmsg+0x10/0x10 [ 286.129490][ T9114] __sock_sendmsg+0x21c/0x270 [ 286.129534][ T9114] ____sys_sendmsg+0x505/0x830 [ 286.129581][ T9114] ? __pfx_____sys_sendmsg+0x10/0x10 [ 286.129641][ T9114] ? import_iovec+0x74/0xa0 [ 286.129683][ T9114] ___sys_sendmsg+0x21f/0x2a0 [ 286.129718][ T9114] ? __pfx____sys_sendmsg+0x10/0x10 [ 286.129821][ T9114] ? __fget_files+0x2a/0x420 [ 286.129889][ T9114] ? __fget_files+0x2a/0x420 [ 286.129907][ T9114] ? __fget_files+0x3a0/0x420 [ 286.129967][ T9114] __x64_sys_sendmsg+0x19b/0x260 [ 286.130003][ T9114] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 286.130064][ T9114] ? __pfx_ksys_write+0x10/0x10 [ 286.130087][ T9114] ? rcu_is_watching+0x15/0xb0 [ 286.130125][ T9114] ? do_syscall_64+0xbe/0x3b0 [ 286.130167][ T9114] do_syscall_64+0xfa/0x3b0 [ 286.130193][ T9114] ? lockdep_hardirqs_on+0x9c/0x150 [ 286.130220][ T9114] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 286.130239][ T9114] ? clear_bhb_loop+0x60/0xb0 [ 286.130272][ T9114] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 286.130291][ T9114] RIP: 0033:0x7fb12738ebe9 [ 286.130312][ T9114] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 286.130328][ T9114] RSP: 002b:00007fb1255f6038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 286.130360][ T9114] RAX: ffffffffffffffda RBX: 00007fb1275b5fa0 RCX: 00007fb12738ebe9 [ 286.130374][ T9114] RDX: 0000000000000000 RSI: 0000200000000040 RDI: 0000000000000003 [ 286.130387][ T9114] RBP: 00007fb1255f6090 R08: 0000000000000000 R09: 0000000000000000 [ 286.130398][ T9114] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 286.130409][ T9114] R13: 00007fb1275b6038 R14: 00007fb1275b5fa0 R15: 00007ffded998188 [ 286.130480][ T9114] [ 286.780793][ T9136] ksmbd: Daemon and kernel module version mismatch. ksmbd: 36, kernel module: 1. User-space ksmbd should terminate. [ 287.670235][ T9158] netlink: 12 bytes leftover after parsing attributes in process `syz.3.999'. [ 287.785087][ T9165] FAULT_INJECTION: forcing a failure. [ 287.785087][ T9165] name failslab, interval 1, probability 0, space 0, times 0 [ 287.825979][ T9165] CPU: 1 UID: 0 PID: 9165 Comm: syz.1.1001 Not tainted 6.17.0-rc1-syzkaller-gdc0fe956144d #0 PREEMPT(full) [ 287.826009][ T9165] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 287.826020][ T9165] Call Trace: [ 287.826028][ T9165] [ 287.826037][ T9165] dump_stack_lvl+0x189/0x250 [ 287.826066][ T9165] ? __pfx____ratelimit+0x10/0x10 [ 287.826092][ T9165] ? __pfx_dump_stack_lvl+0x10/0x10 [ 287.826116][ T9165] ? __pfx__printk+0x10/0x10 [ 287.826146][ T9165] ? __pfx___might_resched+0x10/0x10 [ 287.826166][ T9165] ? fs_reclaim_acquire+0x7d/0x100 [ 287.826190][ T9165] should_fail_ex+0x414/0x560 [ 287.826221][ T9165] should_failslab+0xa8/0x100 [ 287.826250][ T9165] __kmalloc_noprof+0xcb/0x4f0 [ 287.826284][ T9165] ? tomoyo_encode+0x28b/0x550 [ 287.826309][ T9165] tomoyo_encode+0x28b/0x550 [ 287.826336][ T9165] tomoyo_realpath_from_path+0x58d/0x5d0 [ 287.826368][ T9165] ? tomoyo_path_number_perm+0x1bc/0x5a0 [ 287.826395][ T9165] tomoyo_path_number_perm+0x1e8/0x5a0 [ 287.826424][ T9165] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 287.826472][ T9165] ? __lock_acquire+0xab9/0xd20 [ 287.826528][ T9165] ? __fget_files+0x2a/0x420 [ 287.826550][ T9165] ? __fget_files+0x2a/0x420 [ 287.826565][ T9165] ? __fget_files+0x3a0/0x420 [ 287.826581][ T9165] ? __fget_files+0x2a/0x420 [ 287.826604][ T9165] security_file_ioctl+0xcb/0x2d0 [ 287.826632][ T9165] __se_sys_ioctl+0x47/0x170 [ 287.826658][ T9165] do_syscall_64+0xfa/0x3b0 [ 287.826684][ T9165] ? lockdep_hardirqs_on+0x9c/0x150 [ 287.826709][ T9165] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 287.826728][ T9165] ? clear_bhb_loop+0x60/0xb0 [ 287.826753][ T9165] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 287.826771][ T9165] RIP: 0033:0x7f98ab58ebe9 [ 287.826790][ T9165] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 287.826806][ T9165] RSP: 002b:00007f98ac443038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 287.826828][ T9165] RAX: ffffffffffffffda RBX: 00007f98ab7b5fa0 RCX: 00007f98ab58ebe9 [ 287.826842][ T9165] RDX: 0000200000000040 RSI: 00000000401054d5 RDI: 0000000000000005 [ 287.826855][ T9165] RBP: 00007f98ac443090 R08: 0000000000000000 R09: 0000000000000000 [ 287.826866][ T9165] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 287.826878][ T9165] R13: 00007f98ab7b6038 R14: 00007f98ab7b5fa0 R15: 00007ffc5bae7198 [ 287.826912][ T9165] [ 287.827002][ T9165] ERROR: Out of memory at tomoyo_realpath_from_path. [ 288.560954][ T9171] netlink: 'syz.3.1004': attribute type 10 has an invalid length. [ 288.616380][ T9171] netlink: 55 bytes leftover after parsing attributes in process `syz.3.1004'. [ 288.928546][ T9192] FAULT_INJECTION: forcing a failure. [ 288.928546][ T9192] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 288.948165][ T9192] CPU: 0 UID: 0 PID: 9192 Comm: syz.3.1010 Not tainted 6.17.0-rc1-syzkaller-gdc0fe956144d #0 PREEMPT(full) [ 288.948194][ T9192] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 288.948206][ T9192] Call Trace: [ 288.948214][ T9192] [ 288.948223][ T9192] dump_stack_lvl+0x189/0x250 [ 288.948263][ T9192] ? __pfx____ratelimit+0x10/0x10 [ 288.948291][ T9192] ? __pfx_dump_stack_lvl+0x10/0x10 [ 288.948314][ T9192] ? __pfx__printk+0x10/0x10 [ 288.948358][ T9192] should_fail_ex+0x414/0x560 [ 288.948390][ T9192] _copy_from_user+0x2d/0xb0 [ 288.948414][ T9192] __copy_msghdr+0x3c5/0x5b0 [ 288.948440][ T9192] ___sys_sendmsg+0x1a5/0x2a0 [ 288.948464][ T9192] ? __pfx____sys_sendmsg+0x10/0x10 [ 288.948528][ T9192] ? __fget_files+0x2a/0x420 [ 288.948546][ T9192] ? __fget_files+0x3a0/0x420 [ 288.948576][ T9192] __x64_sys_sendmsg+0x19b/0x260 [ 288.948601][ T9192] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 288.948633][ T9192] ? __pfx_ksys_write+0x10/0x10 [ 288.948656][ T9192] ? rcu_is_watching+0x15/0xb0 [ 288.948683][ T9192] ? do_syscall_64+0xbe/0x3b0 [ 288.948716][ T9192] do_syscall_64+0xfa/0x3b0 [ 288.948740][ T9192] ? lockdep_hardirqs_on+0x9c/0x150 [ 288.948765][ T9192] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 288.948784][ T9192] ? clear_bhb_loop+0x60/0xb0 [ 288.948807][ T9192] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 288.948825][ T9192] RIP: 0033:0x7f5d5cf8ebe9 [ 288.948843][ T9192] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 288.948857][ T9192] RSP: 002b:00007f5d5deb2038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 288.948878][ T9192] RAX: ffffffffffffffda RBX: 00007f5d5d1b5fa0 RCX: 00007f5d5cf8ebe9 [ 288.948891][ T9192] RDX: 0000000000008814 RSI: 0000200000000200 RDI: 0000000000000003 [ 288.948903][ T9192] RBP: 00007f5d5deb2090 R08: 0000000000000000 R09: 0000000000000000 [ 288.948913][ T9192] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 288.948924][ T9192] R13: 00007f5d5d1b6038 R14: 00007f5d5d1b5fa0 R15: 00007fff4df80948 [ 288.948957][ T9192] [ 289.474835][ T9200] netlink: 100 bytes leftover after parsing attributes in process `syz.3.1013'. [ 289.675437][ T9209] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1016'. [ 290.269026][ T9217] lo speed is unknown, defaulting to 1000 [ 290.302639][ T9221] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1022'. [ 290.348374][ T9211] netlink: 55631 bytes leftover after parsing attributes in process `syz.0.1018'. [ 290.392943][ T9223] netlink: 104 bytes leftover after parsing attributes in process `syz.4.1022'. [ 291.107997][ T9228] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1024'. [ 291.309200][ T9222] lo speed is unknown, defaulting to 1000 [ 291.773056][ T9247] FAULT_INJECTION: forcing a failure. [ 291.773056][ T9247] name failslab, interval 1, probability 0, space 0, times 0 [ 291.806022][ T9247] CPU: 1 UID: 0 PID: 9247 Comm: syz.0.1031 Not tainted 6.17.0-rc1-syzkaller-gdc0fe956144d #0 PREEMPT(full) [ 291.806052][ T9247] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 291.806064][ T9247] Call Trace: [ 291.806072][ T9247] [ 291.806081][ T9247] dump_stack_lvl+0x189/0x250 [ 291.806111][ T9247] ? __pfx____ratelimit+0x10/0x10 [ 291.806137][ T9247] ? __pfx_dump_stack_lvl+0x10/0x10 [ 291.806160][ T9247] ? __pfx__printk+0x10/0x10 [ 291.806195][ T9247] ? __pfx___might_resched+0x10/0x10 [ 291.806219][ T9247] should_fail_ex+0x414/0x560 [ 291.806250][ T9247] should_failslab+0xa8/0x100 [ 291.806279][ T9247] kmem_cache_alloc_node_noprof+0x76/0x3c0 [ 291.806307][ T9247] ? __alloc_skb+0x112/0x2d0 [ 291.806347][ T9247] __alloc_skb+0x112/0x2d0 [ 291.806380][ T9247] netlink_sendmsg+0x5c6/0xb30 [ 291.806419][ T9247] ? __pfx_netlink_sendmsg+0x10/0x10 [ 291.806450][ T9247] ? aa_sock_msg_perm+0xf1/0x1d0 [ 291.806481][ T9247] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 291.806502][ T9247] ? __pfx_netlink_sendmsg+0x10/0x10 [ 291.806531][ T9247] __sock_sendmsg+0x21c/0x270 [ 291.806558][ T9247] ____sys_sendmsg+0x505/0x830 [ 291.806586][ T9247] ? __pfx_____sys_sendmsg+0x10/0x10 [ 291.806617][ T9247] ? import_iovec+0x74/0xa0 [ 291.806642][ T9247] ___sys_sendmsg+0x21f/0x2a0 [ 291.806667][ T9247] ? __pfx____sys_sendmsg+0x10/0x10 [ 291.806728][ T9247] ? __fget_files+0x2a/0x420 [ 291.806745][ T9247] ? __fget_files+0x3a0/0x420 [ 291.806775][ T9247] __x64_sys_sendmsg+0x19b/0x260 [ 291.806797][ T9247] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 291.806829][ T9247] ? __pfx_ksys_write+0x10/0x10 [ 291.806851][ T9247] ? rcu_is_watching+0x15/0xb0 [ 291.806878][ T9247] ? do_syscall_64+0xbe/0x3b0 [ 291.806909][ T9247] do_syscall_64+0xfa/0x3b0 [ 291.806933][ T9247] ? lockdep_hardirqs_on+0x9c/0x150 [ 291.806957][ T9247] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 291.806976][ T9247] ? clear_bhb_loop+0x60/0xb0 [ 291.807001][ T9247] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 291.807019][ T9247] RIP: 0033:0x7fdad3b8ebe9 [ 291.807037][ T9247] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 291.807052][ T9247] RSP: 002b:00007fdad49de038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 291.807074][ T9247] RAX: ffffffffffffffda RBX: 00007fdad3db5fa0 RCX: 00007fdad3b8ebe9 [ 291.807088][ T9247] RDX: 0000000000000080 RSI: 0000200000000c40 RDI: 0000000000000003 [ 291.807098][ T9247] RBP: 00007fdad49de090 R08: 0000000000000000 R09: 0000000000000000 [ 291.807108][ T9247] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 291.807117][ T9247] R13: 00007fdad3db6038 R14: 00007fdad3db5fa0 R15: 00007ffe054d7bb8 [ 291.807148][ T9247] [ 292.792823][ T9261] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1034'. [ 293.081213][ T9268] x_tables: ip_tables: icmp match: only valid for protocol 1 [ 293.580296][ T9283] netlink: 60 bytes leftover after parsing attributes in process `syz.1.1044'. [ 293.596555][ T9283] netlink: 60 bytes leftover after parsing attributes in process `syz.1.1044'. [ 293.611126][ T9283] netlink: 60 bytes leftover after parsing attributes in process `syz.1.1044'. [ 294.134021][ T9293] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1048'. [ 295.200437][ T9316] netlink: 'syz.1.1055': attribute type 29 has an invalid length. [ 295.262502][ T9316] netlink: 'syz.1.1055': attribute type 29 has an invalid length. [ 295.270236][ T9319] netlink: 'syz.2.1054': attribute type 39 has an invalid length. [ 295.284725][ T9317] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1052'. [ 295.291803][ T9316] netlink: 500 bytes leftover after parsing attributes in process `syz.1.1055'. [ 296.188029][ T9328] netlink: 60 bytes leftover after parsing attributes in process `syz.1.1058'. [ 296.211831][ T9328] netlink: 60 bytes leftover after parsing attributes in process `syz.1.1058'. [ 296.254879][ T9328] netlink: 60 bytes leftover after parsing attributes in process `syz.1.1058'. [ 297.284994][ T9357] bridge0: port 3(veth1_to_team) entered blocking state [ 297.298491][ T9357] bridge0: port 3(veth1_to_team) entered disabled state [ 297.333460][ T9357] veth1_to_team: entered allmulticast mode [ 297.393837][ T9357] veth1_to_team: entered promiscuous mode [ 297.401138][ T9357] bridge0: port 3(veth1_to_team) entered blocking state [ 297.408391][ T9357] bridge0: port 3(veth1_to_team) entered forwarding state [ 297.997574][ T9376] FAULT_INJECTION: forcing a failure. [ 297.997574][ T9376] name failslab, interval 1, probability 0, space 0, times 0 [ 298.047414][ T9376] CPU: 0 UID: 0 PID: 9376 Comm: syz.2.1072 Not tainted 6.17.0-rc1-syzkaller-gdc0fe956144d #0 PREEMPT(full) [ 298.047444][ T9376] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 298.047455][ T9376] Call Trace: [ 298.047463][ T9376] [ 298.047473][ T9376] dump_stack_lvl+0x189/0x250 [ 298.047501][ T9376] ? __pfx____ratelimit+0x10/0x10 [ 298.047528][ T9376] ? __pfx_dump_stack_lvl+0x10/0x10 [ 298.047552][ T9376] ? __pfx__printk+0x10/0x10 [ 298.047587][ T9376] ? __pfx___might_resched+0x10/0x10 [ 298.047612][ T9376] should_fail_ex+0x414/0x560 [ 298.047646][ T9376] should_failslab+0xa8/0x100 [ 298.047676][ T9376] kmem_cache_alloc_node_noprof+0x76/0x3c0 [ 298.047702][ T9376] ? __alloc_skb+0x112/0x2d0 [ 298.047736][ T9376] __alloc_skb+0x112/0x2d0 [ 298.047770][ T9376] netlink_sendmsg+0x5c6/0xb30 [ 298.047812][ T9376] ? __pfx_netlink_sendmsg+0x10/0x10 [ 298.047845][ T9376] ? aa_sock_msg_perm+0xf1/0x1d0 [ 298.047876][ T9376] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 298.047896][ T9376] ? __pfx_netlink_sendmsg+0x10/0x10 [ 298.047925][ T9376] __sock_sendmsg+0x21c/0x270 [ 298.047953][ T9376] ____sys_sendmsg+0x505/0x830 [ 298.047989][ T9376] ? __pfx_____sys_sendmsg+0x10/0x10 [ 298.048022][ T9376] ? import_iovec+0x74/0xa0 [ 298.048050][ T9376] ___sys_sendmsg+0x21f/0x2a0 [ 298.048073][ T9376] ? __pfx____sys_sendmsg+0x10/0x10 [ 298.048122][ T9376] ? __fget_files+0x2a/0x420 [ 298.048157][ T9376] ? __fget_files+0x2a/0x420 [ 298.048172][ T9376] ? __fget_files+0x3a0/0x420 [ 298.048205][ T9376] __x64_sys_sendmsg+0x19b/0x260 [ 298.048229][ T9376] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 298.048263][ T9376] ? __pfx_ksys_write+0x10/0x10 [ 298.048285][ T9376] ? rcu_is_watching+0x15/0xb0 [ 298.048312][ T9376] ? do_syscall_64+0xbe/0x3b0 [ 298.048344][ T9376] do_syscall_64+0xfa/0x3b0 [ 298.048368][ T9376] ? lockdep_hardirqs_on+0x9c/0x150 [ 298.048392][ T9376] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 298.048410][ T9376] ? clear_bhb_loop+0x60/0xb0 [ 298.048435][ T9376] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 298.048452][ T9376] RIP: 0033:0x7fc137b8ebe9 [ 298.048470][ T9376] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 298.048485][ T9376] RSP: 002b:00007fc138ac1038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 298.048507][ T9376] RAX: ffffffffffffffda RBX: 00007fc137db6090 RCX: 00007fc137b8ebe9 [ 298.048520][ T9376] RDX: 0000000000000000 RSI: 0000200000000080 RDI: 0000000000000005 [ 298.048531][ T9376] RBP: 00007fc138ac1090 R08: 0000000000000000 R09: 0000000000000000 [ 298.048543][ T9376] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 298.048554][ T9376] R13: 00007fc137db6128 R14: 00007fc137db6090 R15: 00007ffd862232d8 [ 298.048591][ T9376] [ 298.855193][ T9388] wg2: entered promiscuous mode [ 298.866972][ T9388] wg2: entered allmulticast mode [ 298.958306][ T9389] netlink: 'syz.3.1077': attribute type 21 has an invalid length. [ 299.693140][ T9408] __nla_validate_parse: 6 callbacks suppressed [ 299.693162][ T9408] netlink: 20 bytes leftover after parsing attributes in process `syz.1.1083'. [ 300.053078][ T9421] netlink: 'syz.4.1086': attribute type 10 has an invalid length. [ 300.807588][ T9384] syzkaller0: entered promiscuous mode [ 300.813781][ T9384] syzkaller0: entered allmulticast mode [ 300.899494][ T9427] netlink: 'syz.3.1087': attribute type 21 has an invalid length. [ 300.911004][ T9427] netlink: 164 bytes leftover after parsing attributes in process `syz.3.1087'. [ 300.982027][ T9428] netlink: 64 bytes leftover after parsing attributes in process `syz.3.1087'. [ 302.157110][ T9411] netlink: 'syz.0.1085': attribute type 2 has an invalid length. [ 302.235287][ T9421] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 302.276945][ T9421] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 302.320241][ T9421] bond0: (slave batadv_slave_0): Enslaving as an active interface with an up link [ 302.416623][ T9431] netlink: 56537 bytes leftover after parsing attributes in process `syz.1.1088'. [ 302.730843][ T9453] netlink: 'syz.3.1093': attribute type 11 has an invalid length. [ 304.929608][ T9489] netlink: 20 bytes leftover after parsing attributes in process `syz.1.1108'. [ 306.645845][ T9491] netlink: 20 bytes leftover after parsing attributes in process `syz.1.1109'. [ 306.798464][ T9496] netlink: 'syz.1.1110': attribute type 1 has an invalid length. [ 308.159096][ T9516] netlink: 'syz.1.1117': attribute type 3 has an invalid length. [ 308.189782][ T9516] netlink: 'syz.1.1117': attribute type 1 has an invalid length. [ 308.233750][ T9516] netlink: 60387 bytes leftover after parsing attributes in process `syz.1.1117'. [ 308.284129][ T9516] netlink: 'syz.1.1117': attribute type 10 has an invalid length. [ 308.355382][ T9516] team0: Device ip6_vti0 is of different type [ 309.197168][ T9532] netlink: 136 bytes leftover after parsing attributes in process `syz.3.1122'. [ 310.371781][ T9549] lo speed is unknown, defaulting to 1000 [ 311.034900][ T9560] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1132'. [ 311.306126][ T30] audit: type=1107 audit(1755276109.936:4): pid=9564 uid=0 auid=4294967295 ses=4294967295 subj=unconfined msg='' [ 311.591631][ T9569] mac80211_hwsim hwsim10 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 311.747566][ T9574] netlink: 'syz.4.1137': attribute type 21 has an invalid length. [ 312.151873][ T9574] syzkaller0: default qdisc (pfifo_fast) fail, fallback to noqueue [ 312.256839][ T9580] netlink: 'syz.2.1133': attribute type 10 has an invalid length. [ 312.497594][ T9563] netlink: 'syz.2.1133': attribute type 29 has an invalid length. [ 312.756298][ T9593] nft_compat: unsupported protocol 1 [ 312.766180][ T9593] netlink: 324 bytes leftover after parsing attributes in process `syz.1.1140'. [ 314.437645][ T9596] lo speed is unknown, defaulting to 1000 [ 314.495663][ T9601] netlink: 188 bytes leftover after parsing attributes in process `syz.0.1144'. [ 314.712906][ T9606] netlink: 16 bytes leftover after parsing attributes in process `syz.3.1147'. [ 315.067760][ T9613] netlink: 44 bytes leftover after parsing attributes in process `syz.1.1149'. [ 315.414081][ T9621] netlink: 'syz.1.1151': attribute type 10 has an invalid length. [ 315.508958][ T9621] netlink: 40 bytes leftover after parsing attributes in process `syz.1.1151'. [ 315.760133][ T9621] netlink: 20 bytes leftover after parsing attributes in process `syz.1.1151'. [ 316.062136][ T9630] netlink: 147608 bytes leftover after parsing attributes in process `syz.0.1153'. [ 316.101731][ T9630] netlink: 62239 bytes leftover after parsing attributes in process `syz.0.1153'. [ 317.008327][ T9664] netlink: 44 bytes leftover after parsing attributes in process `syz.3.1161'. [ 317.026581][ T9663] openvswitch: netlink: IP tunnel dst address not specified [ 317.086744][ T9663] netlink: 60 bytes leftover after parsing attributes in process `syz.2.1160'. [ 317.280187][ T9673] netlink: 'syz.3.1165': attribute type 21 has an invalid length. [ 317.305508][ T1307] ieee802154 phy0 wpan0: encryption failed: -22 [ 317.312139][ T1307] ieee802154 phy1 wpan1: encryption failed: -22 [ 317.333416][ T9671] netlink: 'syz.1.1162': attribute type 1 has an invalid length. [ 317.687755][ T9682] netlink: 14593 bytes leftover after parsing attributes in process `syz.2.1167'. [ 317.705363][ T9679] netlink: 147608 bytes leftover after parsing attributes in process `syz.0.1166'. [ 317.718830][ T9679] netlink: 62239 bytes leftover after parsing attributes in process `syz.0.1166'. [ 318.350315][ T9692] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1170'. [ 318.467711][ T9692] netlink: 104 bytes leftover after parsing attributes in process `syz.1.1170'. [ 318.549028][ T9700] netlink: 'syz.4.1172': attribute type 10 has an invalid length. [ 318.557488][ T9700] netlink: 55 bytes leftover after parsing attributes in process `syz.4.1172'. [ 318.703275][ T9712] FAULT_INJECTION: forcing a failure. [ 318.703275][ T9712] name failslab, interval 1, probability 0, space 0, times 0 [ 318.725189][ T9712] CPU: 1 UID: 0 PID: 9712 Comm: syz.2.1174 Not tainted 6.17.0-rc1-syzkaller-gdc0fe956144d #0 PREEMPT(full) [ 318.725220][ T9712] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 318.725231][ T9712] Call Trace: [ 318.725240][ T9712] [ 318.725249][ T9712] dump_stack_lvl+0x189/0x250 [ 318.725278][ T9712] ? __pfx____ratelimit+0x10/0x10 [ 318.725303][ T9712] ? __pfx_dump_stack_lvl+0x10/0x10 [ 318.725326][ T9712] ? __pfx__printk+0x10/0x10 [ 318.725360][ T9712] ? __pfx___might_resched+0x10/0x10 [ 318.725384][ T9712] should_fail_ex+0x414/0x560 [ 318.725416][ T9712] should_failslab+0xa8/0x100 [ 318.725445][ T9712] kmem_cache_alloc_node_noprof+0x76/0x3c0 [ 318.725471][ T9712] ? __alloc_skb+0x112/0x2d0 [ 318.725503][ T9712] __alloc_skb+0x112/0x2d0 [ 318.725535][ T9712] netlink_sendmsg+0x5c6/0xb30 [ 318.725574][ T9712] ? __pfx_netlink_sendmsg+0x10/0x10 [ 318.725604][ T9712] ? aa_sock_msg_perm+0xf1/0x1d0 [ 318.725635][ T9712] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 318.725656][ T9712] ? __pfx_netlink_sendmsg+0x10/0x10 [ 318.725684][ T9712] __sock_sendmsg+0x21c/0x270 [ 318.725712][ T9712] ____sys_sendmsg+0x505/0x830 [ 318.725738][ T9712] ? __pfx_____sys_sendmsg+0x10/0x10 [ 318.725768][ T9712] ? import_iovec+0x74/0xa0 [ 318.725794][ T9712] ___sys_sendmsg+0x21f/0x2a0 [ 318.725816][ T9712] ? __pfx____sys_sendmsg+0x10/0x10 [ 318.725875][ T9712] ? __fget_files+0x2a/0x420 [ 318.725891][ T9712] ? __fget_files+0x3a0/0x420 [ 318.725925][ T9712] __x64_sys_sendmsg+0x19b/0x260 [ 318.725948][ T9712] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 318.725987][ T9712] ? __pfx_ksys_write+0x10/0x10 [ 318.726010][ T9712] ? rcu_is_watching+0x15/0xb0 [ 318.726035][ T9712] ? do_syscall_64+0xbe/0x3b0 [ 318.726066][ T9712] do_syscall_64+0xfa/0x3b0 [ 318.726089][ T9712] ? lockdep_hardirqs_on+0x9c/0x150 [ 318.726113][ T9712] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 318.726132][ T9712] ? clear_bhb_loop+0x60/0xb0 [ 318.726155][ T9712] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 318.726172][ T9712] RIP: 0033:0x7fc137b8ebe9 [ 318.726191][ T9712] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 318.726207][ T9712] RSP: 002b:00007fc138aa0038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 318.726240][ T9712] RAX: ffffffffffffffda RBX: 00007fc137db6180 RCX: 00007fc137b8ebe9 [ 318.726255][ T9712] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 000000000000000a [ 318.726267][ T9712] RBP: 00007fc138aa0090 R08: 0000000000000000 R09: 0000000000000000 [ 318.726277][ T9712] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 318.726289][ T9712] R13: 00007fc137db6218 R14: 00007fc137db6180 R15: 00007ffd862232d8 [ 318.726321][ T9712] [ 319.816868][ T9720] netlink: 'syz.4.1178': attribute type 21 has an invalid length. [ 320.181374][ T9732] FAULT_INJECTION: forcing a failure. [ 320.181374][ T9732] name failslab, interval 1, probability 0, space 0, times 0 [ 320.199200][ T9732] CPU: 0 UID: 0 PID: 9732 Comm: syz.3.1180 Not tainted 6.17.0-rc1-syzkaller-gdc0fe956144d #0 PREEMPT(full) [ 320.199231][ T9732] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 320.199242][ T9732] Call Trace: [ 320.199250][ T9732] [ 320.199258][ T9732] dump_stack_lvl+0x189/0x250 [ 320.199286][ T9732] ? __pfx____ratelimit+0x10/0x10 [ 320.199313][ T9732] ? __pfx_dump_stack_lvl+0x10/0x10 [ 320.199335][ T9732] ? __pfx__printk+0x10/0x10 [ 320.199368][ T9732] ? __pfx___might_resched+0x10/0x10 [ 320.199386][ T9732] ? fs_reclaim_acquire+0x7d/0x100 [ 320.199410][ T9732] should_fail_ex+0x414/0x560 [ 320.199441][ T9732] should_failslab+0xa8/0x100 [ 320.199470][ T9732] __kmalloc_noprof+0xcb/0x4f0 [ 320.199492][ T9732] ? kfree+0x4d/0x440 [ 320.199512][ T9732] ? tomoyo_realpath_from_path+0xe3/0x5d0 [ 320.199537][ T9732] tomoyo_realpath_from_path+0xe3/0x5d0 [ 320.199559][ T9732] ? tomoyo_domain+0xd9/0x130 [ 320.199586][ T9732] ? tomoyo_path_number_perm+0x1bc/0x5a0 [ 320.199611][ T9732] tomoyo_path_number_perm+0x1e8/0x5a0 [ 320.199640][ T9732] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 320.199685][ T9732] ? __lock_acquire+0xab9/0xd20 [ 320.199736][ T9732] ? __fget_files+0x2a/0x420 [ 320.199757][ T9732] ? __fget_files+0x2a/0x420 [ 320.199772][ T9732] ? __fget_files+0x3a0/0x420 [ 320.199788][ T9732] ? __fget_files+0x2a/0x420 [ 320.199809][ T9732] security_file_ioctl+0xcb/0x2d0 [ 320.199836][ T9732] __se_sys_ioctl+0x47/0x170 [ 320.199864][ T9732] do_syscall_64+0xfa/0x3b0 [ 320.199888][ T9732] ? lockdep_hardirqs_on+0x9c/0x150 [ 320.199920][ T9732] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 320.199940][ T9732] ? clear_bhb_loop+0x60/0xb0 [ 320.199963][ T9732] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 320.199981][ T9732] RIP: 0033:0x7f5d5cf8ebe9 [ 320.199999][ T9732] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 320.200015][ T9732] RSP: 002b:00007f5d5de70038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 320.200038][ T9732] RAX: ffffffffffffffda RBX: 00007f5d5d1b6180 RCX: 00007f5d5cf8ebe9 [ 320.200052][ T9732] RDX: 0000200000000000 RSI: 0000000000008924 RDI: 000000000000000e [ 320.200064][ T9732] RBP: 00007f5d5de70090 R08: 0000000000000000 R09: 0000000000000000 [ 320.200076][ T9732] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 320.200087][ T9732] R13: 00007f5d5d1b6218 R14: 00007f5d5d1b6180 R15: 00007fff4df80948 [ 320.200121][ T9732] [ 320.200129][ T9732] ERROR: Out of memory at tomoyo_realpath_from_path. [ 321.555410][ T9765] netlink: 'syz.0.1191': attribute type 1 has an invalid length. [ 322.010649][ T9774] wg0 speed is unknown, defaulting to 1000 [ 322.025746][ T9774] wg0 speed is unknown, defaulting to 1000 [ 322.122376][ T9774] wg0 speed is unknown, defaulting to 1000 [ 322.820553][ T9782] __nla_validate_parse: 2 callbacks suppressed [ 322.820577][ T9782] netlink: 40 bytes leftover after parsing attributes in process `syz.4.1195'. [ 322.846483][ T9774] iwpm_register_pid: Unable to send a nlmsg (client = 2) [ 323.086714][ T9782] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1195'. [ 323.164358][ T9785] netlink: 28 bytes leftover after parsing attributes in process `syz.4.1195'. [ 323.324621][ T9774] infiniband syz0: RDMA CMA: cma_listen_on_dev, error -98 [ 323.415627][ T9790] netlink: 60 bytes leftover after parsing attributes in process `syz.1.1198'. [ 323.441733][ T9790] netlink: 60 bytes leftover after parsing attributes in process `syz.1.1198'. [ 323.452257][ T9790] netlink: 60 bytes leftover after parsing attributes in process `syz.1.1198'. [ 323.467641][ T9774] wg0 speed is unknown, defaulting to 1000 [ 323.488211][ T9774] wg0 speed is unknown, defaulting to 1000 [ 323.605620][ T9774] wg0 speed is unknown, defaulting to 1000 [ 323.615361][ T9774] wg0 speed is unknown, defaulting to 1000 [ 323.625317][ T9774] wg0 speed is unknown, defaulting to 1000 [ 324.467714][ T9804] netlink: 'syz.3.1202': attribute type 21 has an invalid length. [ 324.709132][ T9804] netlink: 32 bytes leftover after parsing attributes in process `syz.3.1202'. [ 324.995514][ T9816] netlink: 'syz.0.1206': attribute type 1 has an invalid length. [ 325.060407][ T9818] netlink: 'syz.1.1205': attribute type 10 has an invalid length. [ 325.125694][ T9818] netlink: 55 bytes leftover after parsing attributes in process `syz.1.1205'. [ 325.143227][ T9812] netlink: 'syz.4.1204': attribute type 29 has an invalid length. [ 325.157891][ T9817] netlink: 'syz.4.1204': attribute type 29 has an invalid length. [ 325.885436][ T5869] Bluetooth: hci3: unexpected event 0x30 length: 151 > 3 [ 325.957350][ T9827] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1210'. [ 326.048612][ T9829] netlink: 104 bytes leftover after parsing attributes in process `syz.0.1210'. [ 327.310663][ T9861] bridge0: port 3(veth1_to_team) entered disabled state [ 327.318050][ T9861] bridge0: port 2(bridge_slave_1) entered disabled state [ 327.326107][ T9861] bridge0: port 1(bridge_slave_0) entered disabled state [ 327.829676][ T9864] netlink: 'syz.1.1220': attribute type 21 has an invalid length. [ 327.894950][ T9870] __nla_validate_parse: 4 callbacks suppressed [ 327.894971][ T9870] netlink: 209852 bytes leftover after parsing attributes in process `syz.3.1222'. [ 327.946353][ T9870] openvswitch: netlink: ufid size 3068 bytes exceeds the range (1, 16) [ 327.986145][ T9870] C: renamed from team_slave_0 (while UP) [ 328.029311][ T9873] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1223'. [ 328.074604][ T9876] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1225'. [ 328.105894][ T9873] netlink: 104 bytes leftover after parsing attributes in process `syz.0.1223'. [ 328.107164][ T9876] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1225'. [ 328.154515][ T9870] syzkaller0: entered promiscuous mode [ 328.160145][ T9870] syzkaller0: entered allmulticast mode [ 329.989498][ T5869] Bluetooth: hci3: unexpected event 0x30 length: 151 > 3 [ 332.391636][ T9906] netlink: 60 bytes leftover after parsing attributes in process `syz.2.1232'. [ 332.573544][ T9922] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1237'. [ 332.584867][ T9921] netlink: 60 bytes leftover after parsing attributes in process `syz.2.1239'. [ 332.604043][ T9922] netlink: 104 bytes leftover after parsing attributes in process `syz.1.1237'. [ 332.614653][ T9921] netlink: 60 bytes leftover after parsing attributes in process `syz.2.1239'. [ 332.748579][ T9921] openvswitch: netlink: Duplicate or invalid key (type 0). [ 332.759930][ T9921] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 332.939301][ T9939] __nla_validate_parse: 1 callbacks suppressed [ 332.939354][ T9939] netlink: 199836 bytes leftover after parsing attributes in process `syz.1.1243'. [ 333.814963][ T9948] netlink: zone id is out of range [ 333.861495][ T9948] netlink: zone id is out of range [ 333.875523][ T9948] netlink: zone id is out of range [ 333.907723][ T9948] netlink: zone id is out of range [ 333.998094][ T9948] netlink: zone id is out of range [ 334.084681][ T9956] netlink: 199836 bytes leftover after parsing attributes in process `syz.0.1248'. [ 334.141164][ T9948] netlink: zone id is out of range [ 334.197806][ T9948] netlink: zone id is out of range [ 334.315649][ T9948] netlink: zone id is out of range [ 334.378660][ T9948] netlink: zone id is out of range [ 334.412703][ T9948] netlink: zone id is out of range [ 334.731883][ T9960] netlink: 'syz.3.1251': attribute type 1 has an invalid length. [ 334.988806][ T9965] netlink: 'syz.4.1253': attribute type 6 has an invalid length. [ 334.998671][ T9965] netlink: 'syz.4.1253': attribute type 3 has an invalid length. [ 335.016393][ T9965] netlink: 153952 bytes leftover after parsing attributes in process `syz.4.1253'. [ 335.347118][ T9981] netlink: 'syz.1.1257': attribute type 2 has an invalid length. [ 335.436965][ T9981] netlink: 'syz.1.1257': attribute type 8 has an invalid length. [ 335.523938][ T9981] netlink: 132 bytes leftover after parsing attributes in process `syz.1.1257'. [ 336.161672][ T9994] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1262'. [ 336.744669][T10010] netlink: 48 bytes leftover after parsing attributes in process `syz.0.1266'. [ 337.287810][T10026] netlink: 'syz.0.1270': attribute type 2 has an invalid length. [ 337.518092][T10026] netlink: 'syz.0.1270': attribute type 8 has an invalid length. [ 337.572421][T10026] netlink: 132 bytes leftover after parsing attributes in process `syz.0.1270'. [ 338.727270][ T5869] Bluetooth: hci3: unexpected event 0x30 length: 151 > 3 [ 339.989073][T10072] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1281'. [ 340.866334][T10082] netlink: 'syz.2.1286': attribute type 21 has an invalid length. [ 341.085045][T10084] netlink: 32 bytes leftover after parsing attributes in process `syz.2.1286'. [ 341.107464][T10088] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1287'. [ 341.132020][T10082] syzkaller0: default qdisc (pfifo_fast) fail, fallback to noqueue [ 341.700205][T10095] netlink: 48 bytes leftover after parsing attributes in process `syz.4.1290'. [ 341.822689][T10098] netlink: 'syz.1.1289': attribute type 2 has an invalid length. [ 341.892500][T10098] netlink: 'syz.1.1289': attribute type 8 has an invalid length. [ 341.900319][T10098] netlink: 132 bytes leftover after parsing attributes in process `syz.1.1289'. [ 343.715385][T10102] netlink: 60 bytes leftover after parsing attributes in process `syz.0.1292'. [ 343.742141][T10108] netlink: 'syz.4.1293': attribute type 46 has an invalid length. [ 343.965580][T10124] netlink: 20 bytes leftover after parsing attributes in process `syz.4.1298'. [ 344.184991][T10131] netlink: 'syz.1.1300': attribute type 1 has an invalid length. [ 344.494406][T10135] netlink: 'syz.1.1301': attribute type 21 has an invalid length. [ 344.650829][T10135] netlink: 32 bytes leftover after parsing attributes in process `syz.1.1301'. [ 345.011723][T10147] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1304'. [ 345.065107][T10148] netlink: 32 bytes leftover after parsing attributes in process `syz.3.1304'. [ 345.151716][T10147] netlink: 104 bytes leftover after parsing attributes in process `syz.3.1304'. [ 345.268842][T10153] netlink: 60 bytes leftover after parsing attributes in process `syz.3.1305'. [ 345.285809][T10153] netlink: 60 bytes leftover after parsing attributes in process `syz.3.1305'. [ 345.296433][T10153] netlink: 60 bytes leftover after parsing attributes in process `syz.3.1305'. [ 345.459162][T10158] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1307'. [ 345.477588][T10158] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1307'. [ 346.423053][T10181] FAULT_INJECTION: forcing a failure. [ 346.423053][T10181] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 346.457088][T10181] CPU: 1 UID: 0 PID: 10181 Comm: syz.1.1315 Not tainted 6.17.0-rc1-syzkaller-gdc0fe956144d #0 PREEMPT(full) [ 346.457123][T10181] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 346.457135][T10181] Call Trace: [ 346.457144][T10181] [ 346.457152][T10181] dump_stack_lvl+0x189/0x250 [ 346.457184][T10181] ? __pfx____ratelimit+0x10/0x10 [ 346.457212][T10181] ? __pfx_dump_stack_lvl+0x10/0x10 [ 346.457236][T10181] ? __pfx__printk+0x10/0x10 [ 346.457264][T10181] ? __might_fault+0xb0/0x130 [ 346.457303][T10181] should_fail_ex+0x414/0x560 [ 346.457334][T10181] _copy_from_iter+0x1db/0x16f0 [ 346.457357][T10181] ? rcu_is_watching+0x15/0xb0 [ 346.457378][T10181] ? kmem_cache_alloc_node_noprof+0x217/0x3c0 [ 346.457406][T10181] ? __pfx__copy_from_iter+0x10/0x10 [ 346.457428][T10181] ? __build_skb_around+0x257/0x3e0 [ 346.457461][T10181] ? netlink_sendmsg+0x642/0xb30 [ 346.457486][T10181] ? skb_put+0x11b/0x210 [ 346.457507][T10181] netlink_sendmsg+0x6b2/0xb30 [ 346.457545][T10181] ? __pfx_netlink_sendmsg+0x10/0x10 [ 346.457576][T10181] ? aa_sock_msg_perm+0xf1/0x1d0 [ 346.457609][T10181] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 346.457630][T10181] ? __pfx_netlink_sendmsg+0x10/0x10 [ 346.457659][T10181] __sock_sendmsg+0x21c/0x270 [ 346.457687][T10181] ____sys_sendmsg+0x505/0x830 [ 346.457715][T10181] ? __pfx_____sys_sendmsg+0x10/0x10 [ 346.457744][T10181] ? import_iovec+0x74/0xa0 [ 346.457769][T10181] ___sys_sendmsg+0x21f/0x2a0 [ 346.457872][T10181] ? __pfx____sys_sendmsg+0x10/0x10 [ 346.457948][T10181] ? __fget_files+0x2a/0x420 [ 346.457967][T10181] ? __fget_files+0x3a0/0x420 [ 346.457996][T10181] __x64_sys_sendmsg+0x19b/0x260 [ 346.458022][T10181] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 346.458052][T10181] ? __pfx_ksys_write+0x10/0x10 [ 346.458075][T10181] ? rcu_is_watching+0x15/0xb0 [ 346.458100][T10181] ? do_syscall_64+0xbe/0x3b0 [ 346.458132][T10181] do_syscall_64+0xfa/0x3b0 [ 346.458158][T10181] ? lockdep_hardirqs_on+0x9c/0x150 [ 346.458183][T10181] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 346.458203][T10181] ? clear_bhb_loop+0x60/0xb0 [ 346.458227][T10181] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 346.458244][T10181] RIP: 0033:0x7f98ab58ebe9 [ 346.458263][T10181] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 346.458280][T10181] RSP: 002b:00007f98ac443038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 346.458302][T10181] RAX: ffffffffffffffda RBX: 00007f98ab7b5fa0 RCX: 00007f98ab58ebe9 [ 346.458317][T10181] RDX: 0000000000000000 RSI: 0000200000000040 RDI: 0000000000000004 [ 346.458330][T10181] RBP: 00007f98ac443090 R08: 0000000000000000 R09: 0000000000000000 [ 346.458342][T10181] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 346.458353][T10181] R13: 00007f98ab7b6038 R14: 00007f98ab7b5fa0 R15: 00007ffc5bae7198 [ 346.458387][T10181] [ 346.784032][T10181] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1315'. [ 346.797022][T10181] netlink: 'syz.1.1315': attribute type 2 has an invalid length. [ 346.807489][T10181] netlink: 132 bytes leftover after parsing attributes in process `syz.1.1315'. [ 347.059983][ T5869] Bluetooth: hci4: ISO packet for unknown connection handle 16 [ 347.109005][T10200] net_ratelimit: 38 callbacks suppressed [ 347.109028][T10200] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 347.894544][ T5869] Bluetooth: hci1: unexpected event 0x08 length: 151 > 4 [ 348.548760][T10225] netlink: 'syz.4.1327': attribute type 39 has an invalid length. [ 349.229403][T10236] netlink: 'syz.4.1332': attribute type 25 has an invalid length. [ 349.239272][T10236] netlink: 'syz.4.1332': attribute type 1 has an invalid length. [ 349.248601][T10236] bridge0: port 1(bridge_slave_0) entered learning state [ 350.231249][T10265] __nla_validate_parse: 5 callbacks suppressed [ 350.231272][T10265] netlink: 20 bytes leftover after parsing attributes in process `syz.3.1340'. [ 350.785904][T10257] delete_channel: no stack [ 351.041095][T10274] delete_channel: no stack [ 352.405426][T10308] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1352'. [ 352.515475][T10315] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1355'. [ 352.526311][T10315] netlink: 'syz.4.1355': attribute type 1 has an invalid length. [ 352.528606][T10313] netlink: 'syz.3.1354': attribute type 1 has an invalid length. [ 352.536108][T10315] netlink: 'syz.4.1355': attribute type 2 has an invalid length. [ 352.558368][T10315] netlink: 'syz.4.1355': attribute type 1 has an invalid length. [ 352.587682][T10315] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1355'. [ 352.632380][T10315] netlink: 'syz.4.1355': attribute type 1 has an invalid length. [ 352.674034][T10315] netlink: 'syz.4.1355': attribute type 2 has an invalid length. [ 352.735884][T10315] netlink: 'syz.4.1355': attribute type 1 has an invalid length. [ 353.274814][T10335] netlink: 'syz.0.1362': attribute type 21 has an invalid length. [ 353.307054][T10337] netlink: 'syz.4.1363': attribute type 10 has an invalid length. [ 353.458375][T10348] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1366'. [ 353.468760][T10348] netlink: 'syz.3.1366': attribute type 2 has an invalid length. [ 353.470630][T10337] team0: Port device geneve1 added [ 353.492581][T10348] netlink: 132 bytes leftover after parsing attributes in process `syz.3.1366'. [ 353.726082][T10354] netlink: 3752 bytes leftover after parsing attributes in process `syz.3.1368'. [ 353.950086][T10362] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1372'. [ 353.983368][T10362] netlink: 200 bytes leftover after parsing attributes in process `syz.3.1372'. [ 354.454113][T10377] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1376'. [ 354.925657][T10379] smc: removing ib device syz1 [ 355.640748][T10400] wg0 speed is unknown, defaulting to 1000 [ 355.650519][T10409] __nla_validate_parse: 4 callbacks suppressed [ 355.650544][T10409] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1386'. [ 355.671568][T10409] netlink: 200 bytes leftover after parsing attributes in process `syz.0.1386'. [ 355.814241][T10411] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1387'. [ 357.815596][T10438] netlink: 100 bytes leftover after parsing attributes in process `syz.1.1393'. [ 358.216843][T10448] validate_nla: 2 callbacks suppressed [ 358.216862][T10448] netlink: 'syz.0.1396': attribute type 21 has an invalid length. [ 358.431552][T10448] netlink: 32 bytes leftover after parsing attributes in process `syz.0.1396'. [ 358.459693][T10441] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1394'. [ 358.807296][T10454] netlink: 'syz.2.1397': attribute type 16 has an invalid length. [ 358.825530][T10454] netlink: 132 bytes leftover after parsing attributes in process `syz.2.1397'. [ 359.290745][T10464] Scheduler tracepoints stat_sleep, stat_iowait, stat_blocked and stat_runtime require the kernel parameter schedstats=enable or kernel.sched_schedstats=1 [ 359.691230][T10473] netlink: 'syz.1.1405': attribute type 6 has an invalid length. [ 361.151123][T10489] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1408'. [ 361.676576][T10490] wg0 speed is unknown, defaulting to 1000 [ 361.766146][T10498] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1410'. [ 365.619899][T10547] netlink: 132 bytes leftover after parsing attributes in process `syz.3.1423'. [ 365.822037][T10535] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1423'. [ 366.044113][T10558] netlink: 'syz.1.1420': attribute type 21 has an invalid length. [ 366.188122][T10560] netlink: 32 bytes leftover after parsing attributes in process `syz.1.1420'. [ 366.553474][T10567] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1429'. [ 366.725520][T10567] netlink: 104 bytes leftover after parsing attributes in process `syz.2.1429'. [ 367.049346][T10574] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1430'. [ 369.041830][T10601] ref_ctr_offset mismatch. inode: 0x5d0 offset: 0x0 ref_ctr_offset(old): 0x4 ref_ctr_offset(new): 0x0 [ 369.072563][T10602] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1440'. [ 369.087302][T10602] netlink: 104 bytes leftover after parsing attributes in process `syz.4.1440'. [ 369.229664][T10609] netlink: 'syz.1.1443': attribute type 21 has an invalid length. [ 369.238068][T10609] netlink: 132 bytes leftover after parsing attributes in process `syz.1.1443'. [ 369.249132][T10609] netlink: 'syz.1.1443': attribute type 1 has an invalid length. [ 369.273184][T10610] netlink: 28 bytes leftover after parsing attributes in process `syz.4.1441'. [ 370.817961][T10631] netlink: 147608 bytes leftover after parsing attributes in process `syz.2.1450'. [ 370.836469][T10635] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1452'. [ 371.433169][T10658] lo speed is unknown, defaulting to 1000 [ 371.458970][T10658] lo speed is unknown, defaulting to 1000 [ 371.473617][T10658] lo speed is unknown, defaulting to 1000 [ 371.585472][ T5869] Bluetooth: hci1: unexpected event 0x30 length: 151 > 3 [ 371.945271][T10668] __nla_validate_parse: 4 callbacks suppressed [ 371.945296][T10668] netlink: 184 bytes leftover after parsing attributes in process `syz.2.1464'. [ 371.978803][T10670] netlink: 14593 bytes leftover after parsing attributes in process `syz.3.1465'. [ 373.116454][T10679] netlink: 'syz.4.1467': attribute type 1 has an invalid length. [ 373.162977][T10658] infiniband syz1: set active [ 373.167791][ T9] lo speed is unknown, defaulting to 1000 [ 373.201327][T10658] infiniband syz1: added lo [ 373.221613][T10658] syz1: rxe_create_cq: returned err = -12 [ 373.230130][T10658] infiniband syz1: Couldn't create ib_mad CQ [ 373.237220][T10658] infiniband syz1: Couldn't open port 1 [ 373.319246][T10658] RDS/IB: syz1: added [ 373.326854][T10658] smc: adding ib device syz1 with port count 1 [ 373.333605][T10658] smc: ib device syz1 port 1 has pnetid [ 373.342203][ T9] lo speed is unknown, defaulting to 1000 [ 373.350729][T10658] lo speed is unknown, defaulting to 1000 [ 373.972476][ T5869] Bluetooth: hci3: unexpected event 0x30 length: 151 > 3 [ 374.589326][T10658] lo speed is unknown, defaulting to 1000 [ 374.670010][T10704] FAULT_INJECTION: forcing a failure. [ 374.670010][T10704] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 374.671026][T10704] [ 374.671036][T10704] ====================================================== [ 374.671044][T10704] WARNING: possible circular locking dependency detected [ 374.671053][T10704] 6.17.0-rc1-syzkaller-gdc0fe956144d #0 Not tainted [ 374.671063][T10704] ------------------------------------------------------ [ 374.671070][T10704] syz.2.1476/10704 is trying to acquire lock: [ 374.671080][T10704] ffffffff8e12e120 (console_owner){-...}-{0:0}, at: console_flush_all+0x13a/0xc40 [ 374.671142][T10704] [ 374.671142][T10704] but task is already holding lock: [ 374.671148][T10704] ffff8880b8639f98 (&rq->__lock){-.-.}-{2:2}, at: raw_spin_rq_lock_nested+0x2a/0x140 [ 374.671199][T10704] [ 374.671199][T10704] which lock already depends on the new lock. [ 374.671199][T10704] [ 374.671206][T10704] [ 374.671206][T10704] the existing dependency chain (in reverse order) is: [ 374.671213][T10704] [ 374.671213][T10704] -> #4 (&rq->__lock){-.-.}-{2:2}: [ 374.671238][T10704] lock_acquire+0x120/0x360 [ 374.671264][T10704] _raw_spin_lock_nested+0x32/0x50 [ 374.671287][T10704] raw_spin_rq_lock_nested+0x2a/0x140 [ 374.671312][T10704] task_rq_lock+0xbc/0x470 [ 374.671336][T10704] cgroup_move_task+0x92/0x2a0 [ 374.671353][T10704] css_set_move_task+0x658/0x9e0 [ 374.671372][T10704] cgroup_post_fork+0x1ef/0x790 [ 374.671390][T10704] copy_process+0x3862/0x3c00 [ 374.671408][T10704] kernel_clone+0x21e/0x840 [ 374.671426][T10704] user_mode_thread+0xdd/0x140 [ 374.671444][T10704] rest_init+0x23/0x300 [ 374.671460][T10704] start_kernel+0x3a9/0x410 [ 374.671476][T10704] x86_64_start_reservations+0x24/0x30 [ 374.671498][T10704] x86_64_start_kernel+0x143/0x1c0 [ 374.671519][T10704] common_startup_64+0x13e/0x147 [ 374.671542][T10704] [ 374.671542][T10704] -> #3 (&p->pi_lock){-.-.}-{2:2}: [ 374.671567][T10704] lock_acquire+0x120/0x360 [ 374.671590][T10704] _raw_spin_lock_irqsave+0xa7/0xf0 [ 374.671609][T10704] try_to_wake_up+0x67/0x12b0 [ 374.671630][T10704] __wake_up_common_lock+0x134/0x1f0 [ 374.671651][T10704] tty_port_default_wakeup+0xa2/0xf0 [ 374.671668][T10704] serial8250_tx_chars+0x72e/0x970 [ 374.671692][T10704] serial8250_handle_irq+0x633/0xbb0 [ 374.671716][T10704] serial8250_default_handle_irq+0xbf/0x1e0 [ 374.671734][T10704] serial8250_interrupt+0x8a/0x160 [ 374.671754][T10704] __handle_irq_event_percpu+0x28c/0x980 [ 374.671774][T10704] handle_irq_event+0x8b/0x1e0 [ 374.671794][T10704] handle_edge_irq+0x23b/0xa10 [ 374.671811][T10704] __common_interrupt+0x141/0x1f0 [ 374.671836][T10704] common_interrupt+0xb6/0xe0 [ 374.671852][T10704] asm_common_interrupt+0x26/0x40 [ 374.671869][T10704] pv_native_safe_halt+0x13/0x20 [ 374.671890][T10704] default_idle+0x13/0x20 [ 374.671904][T10704] default_idle_call+0x74/0xb0 [ 374.671918][T10704] do_idle+0x1e8/0x510 [ 374.671932][T10704] cpu_startup_entry+0x44/0x60 [ 374.671947][T10704] rest_init+0x2de/0x300 [ 374.671962][T10704] start_kernel+0x3a9/0x410 [ 374.672029][T10704] x86_64_start_reservations+0x24/0x30 [ 374.672050][T10704] x86_64_start_kernel+0x143/0x1c0 [ 374.672071][T10704] common_startup_64+0x13e/0x147 [ 374.672093][T10704] [ 374.672093][T10704] -> #2 (&tty->write_wait){-.-.}-{3:3}: [ 374.672118][T10704] lock_acquire+0x120/0x360 [ 374.672141][T10704] _raw_spin_lock_irqsave+0xa7/0xf0 [ 374.672161][T10704] __wake_up_common_lock+0x2f/0x1f0 [ 374.672180][T10704] tty_port_default_wakeup+0xa2/0xf0 [ 374.672197][T10704] serial8250_tx_chars+0x72e/0x970 [ 374.672221][T10704] serial8250_handle_irq+0x633/0xbb0 [ 374.672246][T10704] serial8250_default_handle_irq+0xbf/0x1e0 [ 374.672264][T10704] serial8250_interrupt+0x8a/0x160 [ 374.672284][T10704] __handle_irq_event_percpu+0x28c/0x980 [ 374.672304][T10704] handle_irq_event+0x8b/0x1e0 [ 374.672324][T10704] handle_edge_irq+0x23b/0xa10 [ 374.672341][T10704] __common_interrupt+0x141/0x1f0 [ 374.672365][T10704] common_interrupt+0xb6/0xe0 [ 374.672381][T10704] asm_common_interrupt+0x26/0x40 [ 374.672396][T10704] _raw_spin_unlock_irqrestore+0xa8/0x110 [ 374.672416][T10704] uart_port_unlock_deref+0x111/0x2f0 [ 374.672440][T10704] uart_write+0xe8/0x130 [ 374.672462][T10704] n_tty_write+0xd29/0x1200 [ 374.672479][T10704] file_tty_write+0x551/0xa20 [ 374.672501][T10704] vfs_write+0x5c9/0xb30 [ 374.672522][T10704] ksys_write+0x145/0x250 [ 374.672542][T10704] do_syscall_64+0xfa/0x3b0 [ 374.672565][T10704] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 374.672582][T10704] [ 374.672582][T10704] -> #1 (&port_lock_key){-.-.}-{3:3}: [ 374.672608][T10704] lock_acquire+0x120/0x360 [ 374.672630][T10704] _raw_spin_lock_irqsave+0xa7/0xf0 [ 374.672649][T10704] serial8250_console_write+0x17e/0x1ba0 [ 374.672664][T10704] console_flush_all+0x728/0xc40 [ 374.672683][T10704] console_unlock+0xc4/0x270 [ 374.672700][T10704] vprintk_emit+0x5b7/0x7a0 [ 374.672716][T10704] _printk+0xcf/0x120 [ 374.672737][T10704] register_console+0xa8b/0xf90 [ 374.672756][T10704] univ8250_console_init+0x3a/0x70 [ 374.672777][T10704] console_init+0x10e/0x430 [ 374.672798][T10704] start_kernel+0x254/0x410 [ 374.672813][T10704] x86_64_start_reservations+0x24/0x30 [ 374.672834][T10704] x86_64_start_kernel+0x143/0x1c0 [ 374.672855][T10704] common_startup_64+0x13e/0x147 [ 374.672877][T10704] [ 374.672877][T10704] -> #0 (console_owner){-...}-{0:0}: [ 374.672933][T10704] validate_chain+0xb9b/0x2140 [ 374.672950][T10704] __lock_acquire+0xab9/0xd20 [ 374.672983][T10704] lock_acquire+0x120/0x360 [ 374.673005][T10704] console_flush_all+0x6d2/0xc40 [ 374.673024][T10704] console_unlock+0xc4/0x270 [ 374.673040][T10704] vprintk_emit+0x5b7/0x7a0 [ 374.673062][T10704] _printk+0xcf/0x120 [ 374.673099][T10704] should_fail_ex+0x3f5/0x560 [ 374.673121][T10704] strncpy_from_user+0x36/0x290 [ 374.673140][T10704] strncpy_from_user_nofault+0x72/0x150 [ 374.673159][T10704] bpf_probe_read_user_str+0x2a/0x70 [ 374.673176][T10704] bpf_prog_bc7c5c6b9645592f+0x3e/0x44 [ 374.673190][T10704] bpf_trace_run4+0x28e/0x4a0 [ 374.673211][T10704] __bpf_trace_sched_switch+0x17a/0x1e0 [ 374.673232][T10704] __traceiter_sched_switch+0x9a/0xd0 [ 374.673253][T10704] __schedule+0x238f/0x4cc0 [ 374.673272][T10704] preempt_schedule_irq+0xb5/0x150 [ 374.673292][T10704] irqentry_exit+0x6f/0x90 [ 374.673313][T10704] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 374.673331][T10704] kasan_check_range+0x9f/0x2c0 [ 374.673355][T10704] __asan_memcpy+0x29/0x70 [ 374.673373][T10704] sctp_add_bind_addr+0xb0/0x370 [ 374.673400][T10704] sctp_copy_local_addr_list+0x30b/0x4e0 [ 374.673428][T10704] sctp_bind_addr_copy+0xb3/0x3c0 [ 374.673456][T10704] sctp_connect_new_asoc+0x2e0/0x690 [ 374.673488][T10704] sctp_sendmsg+0x155c/0x2810 [ 374.673520][T10704] __sock_sendmsg+0x19c/0x270 [ 374.673554][T10704] ____sys_sendmsg+0x505/0x830 [ 374.673568][T10704] ___sys_sendmsg+0x21f/0x2a0 [ 374.673588][T10704] __x64_sys_sendmsg+0x19b/0x260 [ 374.673614][T10704] do_syscall_64+0xfa/0x3b0 [ 374.673650][T10704] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 374.673670][T10704] [ 374.673670][T10704] other info that might help us debug this: [ 374.673670][T10704] [ 374.673676][T10704] Chain exists of: [ 374.673676][T10704] console_owner --> &p->pi_lock --> &rq->__lock [ 374.673676][T10704] [ 374.673711][T10704] Possible unsafe locking scenario: [ 374.673711][T10704] [ 374.673718][T10704] CPU0 CPU1 [ 374.673723][T10704] ---- ---- [ 374.673729][T10704] lock(&rq->__lock); [ 374.673741][T10704] lock(&p->pi_lock); [ 374.673761][T10704] lock(&rq->__lock); [ 374.673779][T10704] lock(console_owner); [ 374.673792][T10704] [ 374.673792][T10704] *** DEADLOCK *** [ 374.673792][T10704] [ 374.673796][T10704] 6 locks held by syz.2.1476/10704: [ 374.673807][T10704] #0: ffff8880583093d8 (sk_lock-AF_INET){+.+.}-{0:0}, at: sctp_sendmsg+0xb97/0x2810 [ 374.673859][T10704] #1: ffffffff8e139ee0 (rcu_read_lock){....}-{1:3}, at: sctp_copy_local_addr_list+0x9b/0x4e0 [ 374.673905][T10704] #2: ffff8880b8639f98 (&rq->__lock){-.-.}-{2:2}, at: raw_spin_rq_lock_nested+0x2a/0x140 [ 374.673983][T10704] #3: ffffffff8e139ee0 (rcu_read_lock){....}-{1:3}, at: bpf_trace_run4+0x19c/0x4a0 [ 374.674069][T10704] #4: ffffffff8e12e180 (console_lock){+.+.}-{0:0}, at: _printk+0xcf/0x120 [ 374.674122][T10704] #5: ffffffff8e015a50 (console_srcu){....}-{0:0}, at: console_flush_all+0x13a/0xc40 [ 374.674174][T10704] [ 374.674174][T10704] stack backtrace: [ 374.674184][T10704] CPU: 0 UID: 0 PID: 10704 Comm: syz.2.1476 Not tainted 6.17.0-rc1-syzkaller-gdc0fe956144d #0 PREEMPT(full) [ 374.674214][T10704] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 374.674236][T10704] Call Trace: [ 374.674250][T10704] [ 374.674257][T10704] dump_stack_lvl+0x189/0x250 [ 374.674298][T10704] ? __pfx_dump_stack_lvl+0x10/0x10 [ 374.674321][T10704] ? __pfx__printk+0x10/0x10 [ 374.674352][T10704] ? print_lock_name+0xde/0x100 [ 374.674386][T10704] print_circular_bug+0x2ee/0x310 [ 374.674424][T10704] check_noncircular+0x134/0x160 [ 374.674453][T10704] validate_chain+0xb9b/0x2140 [ 374.674500][T10704] __lock_acquire+0xab9/0xd20 [ 374.674536][T10704] ? console_flush_all+0x13a/0xc40 [ 374.674561][T10704] lock_acquire+0x120/0x360 [ 374.674593][T10704] ? console_flush_all+0x13a/0xc40 [ 374.674626][T10704] ? do_raw_spin_unlock+0x122/0x240 [ 374.674654][T10704] ? console_flush_all+0x13a/0xc40 [ 374.674693][T10704] console_flush_all+0x6d2/0xc40 [ 374.674727][T10704] ? console_flush_all+0x13a/0xc40 [ 374.674766][T10704] ? console_flush_all+0x13a/0xc40 [ 374.674791][T10704] ? __pfx_console_flush_all+0x10/0x10 [ 374.674822][T10704] ? is_printk_cpu_sync_owner+0x32/0x40 [ 374.674850][T10704] console_unlock+0xc4/0x270 [ 374.674878][T10704] ? __pfx_console_unlock+0x10/0x10 [ 374.674901][T10704] ? is_printk_cpu_sync_owner+0x32/0x40 [ 374.674929][T10704] vprintk_emit+0x5b7/0x7a0 [ 374.674966][T10704] ? __pfx_vprintk_emit+0x10/0x10 [ 374.675022][T10704] _printk+0xcf/0x120 [ 374.675060][T10704] ? __pfx____ratelimit+0x10/0x10 [ 374.675088][T10704] ? __pfx__printk+0x10/0x10 [ 374.675123][T10704] should_fail_ex+0x3f5/0x560 [ 374.675150][T10704] strncpy_from_user+0x36/0x290 [ 374.675185][T10704] strncpy_from_user_nofault+0x72/0x150 [ 374.675210][T10704] bpf_probe_read_user_str+0x2a/0x70 [ 374.675230][T10704] bpf_prog_bc7c5c6b9645592f+0x3e/0x44 [ 374.675248][T10704] bpf_trace_run4+0x28e/0x4a0 [ 374.675274][T10704] ? bpf_trace_run4+0x19c/0x4a0 [ 374.675305][T10704] ? __pfx_bpf_trace_run4+0x10/0x10 [ 374.675341][T10704] ? __bpf_trace_sched_switch+0x15f/0x1e0 [ 374.675377][T10704] __bpf_trace_sched_switch+0x17a/0x1e0 [ 374.675405][T10704] ? __pfx___bpf_trace_sched_switch+0x10/0x10 [ 374.675429][T10704] ? rcu_read_lock_sched_held+0x89/0x100 [ 374.675450][T10704] ? __schedule+0x22e9/0x4cc0 [ 374.675493][T10704] ? __schedule+0x22e9/0x4cc0 [ 374.675537][T10704] ? tracing_record_taskinfo_sched_switch+0x7d/0x370 [ 374.675568][T10704] ? __pfx___bpf_trace_sched_switch+0x10/0x10 [ 374.675598][T10704] __traceiter_sched_switch+0x9a/0xd0 [ 374.675625][T10704] __schedule+0x238f/0x4cc0 [ 374.675661][T10704] ? stack_depot_save_flags+0x40/0x860 [ 374.675699][T10704] ? __pfx___schedule+0x10/0x10 [ 374.675723][T10704] ? perf_trace_run_bpf_submit+0xee/0x170 [ 374.675751][T10704] ? preempt_schedule_irq+0xaa/0x150 [ 374.675777][T10704] preempt_schedule_irq+0xb5/0x150 [ 374.675802][T10704] ? __pfx_preempt_schedule_irq+0x10/0x10 [ 374.675826][T10704] ? __pfx_perf_trace_preemptirq_template+0x10/0x10 [ 374.675858][T10704] ? rcu_irq_exit_check_preempt+0xdf/0x210 [ 374.675879][T10704] irqentry_exit+0x6f/0x90 [ 374.675904][T10704] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 374.675924][T10704] RIP: 0010:kasan_check_range+0x9f/0x2c0 [ 374.675954][T10704] Code: 00 fc ff df 4d 8d 34 19 4d 89 f4 4d 29 dc 49 83 fc 10 7f 29 4d 85 e4 0f 84 41 01 00 00 4c 89 cb 48 f7 d3 4c 01 fb 41 80 3b 00 <0f> 85 de 01 00 00 49 ff c3 48 ff c3 75 ee e9 21 01 00 00 44 89 dd [ 374.675980][T10704] RSP: 0018:ffffc9000b5774f8 EFLAGS: 00000246 [ 374.675997][T10704] RAX: ffff888033471a01 RBX: fffffffffffffffc RCX: ffffffff8aba2250 [ 374.676012][T10704] RDX: 0000000000000000 RSI: 000000000000001c RDI: ffff8880247d0da0 [ 374.676024][T10704] RBP: ffff88806ee20080 R08: ffff8880247d0dbb R09: 1ffff110048fa1b7 [ 374.676038][T10704] R10: dffffc0000000000 R11: ffffed10048fa1b4 R12: 0000000000000004 [ 374.676052][T10704] R13: ffffffff8dbdf680 R14: ffffed10048fa1b8 R15: 1ffff110048fa1b4 [ 374.676074][T10704] ? sctp_add_bind_addr+0xb0/0x370 [ 374.676103][T10704] ? sctp_add_bind_addr+0xb0/0x370 [ 374.676127][T10704] __asan_memcpy+0x29/0x70 [ 374.676151][T10704] sctp_add_bind_addr+0xb0/0x370 [ 374.676178][T10704] sctp_copy_local_addr_list+0x30b/0x4e0 [ 374.676205][T10704] ? sctp_copy_local_addr_list+0x9b/0x4e0 [ 374.676228][T10704] ? __pfx_sctp_copy_local_addr_list+0x10/0x10 [ 374.676255][T10704] ? sctp_v4_is_any+0x35/0x60 [ 374.676294][T10704] ? sctp_copy_one_addr+0x93/0x360 [ 374.676320][T10704] sctp_bind_addr_copy+0xb3/0x3c0 [ 374.676344][T10704] ? sctp_assoc_set_bind_addr_from_ep+0xa5/0x1a0 [ 374.676368][T10704] sctp_connect_new_asoc+0x2e0/0x690 [ 374.676399][T10704] ? __pfx_sctp_connect_new_asoc+0x10/0x10 [ 374.676427][T10704] ? __local_bh_enable_ip+0x12d/0x1c0 [ 374.676452][T10704] ? bpf_lsm_sctp_bind_connect+0x9/0x20 [ 374.676474][T10704] ? security_sctp_bind_connect+0x7e/0x2e0 [ 374.676502][T10704] sctp_sendmsg+0x155c/0x2810 [ 374.676537][T10704] ? __pfx_sctp_sendmsg+0x10/0x10 [ 374.676565][T10704] ? irqentry_exit+0x74/0x90 [ 374.676589][T10704] ? lockdep_hardirqs_on+0x9c/0x150 [ 374.676623][T10704] ? sock_rps_record_flow+0x19/0x410 [ 374.676649][T10704] ? inet_sendmsg+0x2f4/0x370 [ 374.676673][T10704] __sock_sendmsg+0x19c/0x270 [ 374.676700][T10704] ____sys_sendmsg+0x505/0x830 [ 374.676723][T10704] ? __pfx_____sys_sendmsg+0x10/0x10 [ 374.676749][T10704] ? import_iovec+0x74/0xa0 [ 374.676772][T10704] ___sys_sendmsg+0x21f/0x2a0 [ 374.676792][T10704] ? __pfx____sys_sendmsg+0x10/0x10 [ 374.676832][T10704] ? __fget_files+0x2a/0x420 [ 374.676858][T10704] ? __fget_files+0x2a/0x420 [ 374.676873][T10704] ? __fget_files+0x3a0/0x420 [ 374.676896][T10704] __x64_sys_sendmsg+0x19b/0x260 [ 374.676917][T10704] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 374.676949][T10704] ? do_syscall_64+0xbe/0x3b0 [ 374.676985][T10704] do_syscall_64+0xfa/0x3b0 [ 374.677012][T10704] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 374.677030][T10704] ? asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 374.677050][T10704] ? clear_bhb_loop+0x60/0xb0 [ 374.677072][T10704] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 374.677091][T10704] RIP: 0033:0x7fc137b8ebe9 [ 374.677108][T10704] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 374.677125][T10704] RSP: 002b:00007fc138ae2038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 374.677144][T10704] RAX: ffffffffffffffda RBX: 00007fc137db5fa0 RCX: 00007fc137b8ebe9 [ 374.677157][T10704] RDX: 00000000000080d1 RSI: 0000200000000140 RDI: 0000000000000008 [ 374.677169][T10704] RBP: 00007fc138ae2090 R08: 0000000000000000 R09: 0000000000000000 [ 374.677181][T10704] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 374.677192][T10704] R13: 00007fc137db6038 R14: 00007fc137db5fa0 R15: 00007ffd862232d8 [ 374.677215][T10704] [ 376.203973][T10704] CPU: 0 UID: 0 PID: 10704 Comm: syz.2.1476 Not tainted 6.17.0-rc1-syzkaller-gdc0fe956144d #0 PREEMPT(full) [ 376.203992][T10704] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 376.204001][T10704] Call Trace: [ 376.204009][T10704] [ 376.204015][T10704] dump_stack_lvl+0x189/0x250 [ 376.204035][T10704] ? __pfx____ratelimit+0x10/0x10 [ 376.204051][T10704] ? __pfx_dump_stack_lvl+0x10/0x10 [ 376.204064][T10704] ? __pfx__printk+0x10/0x10 [ 376.204085][T10704] should_fail_ex+0x414/0x560 [ 376.204102][T10704] strncpy_from_user+0x36/0x290 [ 376.204117][T10704] strncpy_from_user_nofault+0x72/0x150 [ 376.204133][T10704] bpf_probe_read_user_str+0x2a/0x70 [ 376.204146][T10704] bpf_prog_bc7c5c6b9645592f+0x3e/0x44 [ 376.204157][T10704] bpf_trace_run4+0x28e/0x4a0 [ 376.204172][T10704] ? bpf_trace_run4+0x19c/0x4a0 [ 376.204190][T10704] ? __pfx_bpf_trace_run4+0x10/0x10 [ 376.204208][T10704] ? __bpf_trace_sched_switch+0x15f/0x1e0 [ 376.204224][T10704] __bpf_trace_sched_switch+0x17a/0x1e0 [ 376.204240][T10704] ? __pfx___bpf_trace_sched_switch+0x10/0x10 [ 376.204255][T10704] ? rcu_read_lock_sched_held+0x89/0x100 [ 376.204267][T10704] ? __schedule+0x22e9/0x4cc0 [ 376.204284][T10704] ? __schedule+0x22e9/0x4cc0 [ 376.204299][T10704] ? tracing_record_taskinfo_sched_switch+0x7d/0x370 [ 376.204314][T10704] ? __pfx___bpf_trace_sched_switch+0x10/0x10 [ 376.204329][T10704] __traceiter_sched_switch+0x9a/0xd0 [ 376.204345][T10704] __schedule+0x238f/0x4cc0 [ 376.204366][T10704] ? stack_depot_save_flags+0x40/0x860 [ 376.204382][T10704] ? __pfx___schedule+0x10/0x10 [ 376.204397][T10704] ? perf_trace_run_bpf_submit+0xee/0x170 [ 376.204416][T10704] ? preempt_schedule_irq+0xaa/0x150 [ 376.204432][T10704] preempt_schedule_irq+0xb5/0x150 [ 376.204450][T10704] ? __pfx_preempt_schedule_irq+0x10/0x10 [ 376.204465][T10704] ? __pfx_perf_trace_preemptirq_template+0x10/0x10 [ 376.204484][T10704] ? rcu_irq_exit_check_preempt+0xdf/0x210 [ 376.204497][T10704] irqentry_exit+0x6f/0x90 [ 376.204511][T10704] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 376.204524][T10704] RIP: 0010:kasan_check_range+0x9f/0x2c0 [ 376.204543][T10704] Code: 00 fc ff df 4d 8d 34 19 4d 89 f4 4d 29 dc 49 83 fc 10 7f 29 4d 85 e4 0f 84 41 01 00 00 4c 89 cb 48 f7 d3 4c 01 fb 41 80 3b 00 <0f> 85 de 01 00 00 49 ff c3 48 ff c3 75 ee e9 21 01 00 00 44 89 dd [ 376.204554][T10704] RSP: 0018:ffffc9000b5774f8 EFLAGS: 00000246 [ 376.204566][T10704] RAX: ffff888033471a01 RBX: fffffffffffffffc RCX: ffffffff8aba2250 [ 376.204576][T10704] RDX: 0000000000000000 RSI: 000000000000001c RDI: ffff8880247d0da0 [ 376.204584][T10704] RBP: ffff88806ee20080 R08: ffff8880247d0dbb R09: 1ffff110048fa1b7 [ 376.204593][T10704] R10: dffffc0000000000 R11: ffffed10048fa1b4 R12: 0000000000000004 [ 376.204601][T10704] R13: ffffffff8dbdf680 R14: ffffed10048fa1b8 R15: 1ffff110048fa1b4 [ 376.204613][T10704] ? sctp_add_bind_addr+0xb0/0x370 [ 376.204631][T10704] ? sctp_add_bind_addr+0xb0/0x370 [ 376.204645][T10704] __asan_memcpy+0x29/0x70 [ 376.204659][T10704] sctp_add_bind_addr+0xb0/0x370 [ 376.204675][T10704] sctp_copy_local_addr_list+0x30b/0x4e0 [ 376.204693][T10704] ? sctp_copy_local_addr_list+0x9b/0x4e0 [ 376.204708][T10704] ? __pfx_sctp_copy_local_addr_list+0x10/0x10 [ 376.204723][T10704] ? sctp_v4_is_any+0x35/0x60 [ 376.204744][T10704] ? sctp_copy_one_addr+0x93/0x360 [ 376.204759][T10704] sctp_bind_addr_copy+0xb3/0x3c0 [ 376.204774][T10704] ? sctp_assoc_set_bind_addr_from_ep+0xa5/0x1a0 [ 376.204788][T10704] sctp_connect_new_asoc+0x2e0/0x690 [ 376.204807][T10704] ? __pfx_sctp_connect_new_asoc+0x10/0x10 [ 376.204823][T10704] ? __local_bh_enable_ip+0x12d/0x1c0 [ 376.204837][T10704] ? bpf_lsm_sctp_bind_connect+0x9/0x20 [ 376.204851][T10704] ? security_sctp_bind_connect+0x7e/0x2e0 [ 376.204867][T10704] sctp_sendmsg+0x155c/0x2810 [ 376.204889][T10704] ? __pfx_sctp_sendmsg+0x10/0x10 [ 376.204906][T10704] ? irqentry_exit+0x74/0x90 [ 376.204921][T10704] ? lockdep_hardirqs_on+0x9c/0x150 [ 376.204951][T10704] ? sock_rps_record_flow+0x19/0x410 [ 376.204966][T10704] ? inet_sendmsg+0x2f4/0x370 [ 376.204981][T10704] __sock_sendmsg+0x19c/0x270 [ 376.204998][T10704] ____sys_sendmsg+0x505/0x830 [ 376.205012][T10704] ? __pfx_____sys_sendmsg+0x10/0x10 [ 376.205026][T10704] ? import_iovec+0x74/0xa0 [ 376.205040][T10704] ___sys_sendmsg+0x21f/0x2a0 [ 376.205052][T10704] ? __pfx____sys_sendmsg+0x10/0x10 [ 376.205071][T10704] ? __fget_files+0x2a/0x420 [ 376.205086][T10704] ? __fget_files+0x2a/0x420 [ 376.205095][T10704] ? __fget_files+0x3a0/0x420 [ 376.205108][T10704] __x64_sys_sendmsg+0x19b/0x260 [ 376.205120][T10704] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 376.205138][T10704] ? do_syscall_64+0xbe/0x3b0 [ 376.205155][T10704] do_syscall_64+0xfa/0x3b0 [ 376.205171][T10704] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 376.205182][T10704] ? asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 376.205194][T10704] ? clear_bhb_loop+0x60/0xb0 [ 376.205207][T10704] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 376.205218][T10704] RIP: 0033:0x7fc137b8ebe9 [ 376.205229][T10704] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 376.205239][T10704] RSP: 002b:00007fc138ae2038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 376.205251][T10704] RAX: ffffffffffffffda RBX: 00007fc137db5fa0 RCX: 00007fc137b8ebe9 [ 376.205260][T10704] RDX: 00000000000080d1 RSI: 0000200000000140 RDI: 0000000000000008 [ 376.205267][T10704] RBP: 00007fc138ae2090 R08: 0000000000000000 R09: 0000000000000000 [ 376.205275][T10704] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 376.205282][T10704] R13: 00007fc137db6038 R14: 00007fc137db5fa0 R15: 00007ffd862232d8 [ 376.205296][T10704] [ 376.986086][T10705] netlink: 20 bytes leftover after parsing attributes in process `syz.0.1470'. [ 377.159810][T10658] lo speed is unknown, defaulting to 1000 [ 377.264763][T10658] lo speed is unknown, defaulting to 1000 [ 377.371466][T10658] lo speed is unknown, defaulting to 1000 [ 378.725332][ T1307] ieee802154 phy0 wpan0: encryption failed: -22 [ 378.731830][ T1307] ieee802154 phy1 wpan1: encryption failed: -22